bugcrowd

The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™

[bugcrowd @Bugcrowd]

"Won't fix." 😂

[bugcrowd @Bugcrowd]

Exactly one week from right now, you could be:
🟠 Meeting CISOs and expert hackers
🟠 Learning how to uncover vulnerabilities faster
🟠 Networking over drinks and dinner

It's your last chance to sign up for the Hive Exchange Nuremberg! Don't miss it 🚀 https://t.co/m7lMu3SUnM

[bugcrowd @Bugcrowd]

Get a better understanding of why you should stay within scope: 👇
https://t.co/iFEgHPqgeX

[bugcrowd @Bugcrowd]

You can never go wrong with recon. 🔎

Here are some tactics you can try:
🟠 Scope company domains
🟠 Scope target company acquisitions
🟠 Enumerate ASNs
🟠 Run reverse WHOIS lookups
🟠 Enumerate subdomains
🟠 Analyze open ports
🟠 Check ad/analytics trackers
🟠 Use Shodan to find exposed assets
🟠 Google copyrights, terms of service, and privacy policies

Just make sure to test only in-scope assets. ✅

[bugcrowd @Bugcrowd]

UPCOMING EVENT: Join us on October 21 for the RSA Conference, where Alistair G, our Director of Red Teaming, will participate as a panelist in the Innovation Showcase: "Countering AI-Powered Fraud Before It Happens."

Register here:
https://t.co/eKT9okdgqx

[bugcrowd @Bugcrowd]

How does a top hacker prepare for a Live Hacking Event (LHE)? 😏

Let’s hear it from a pro:

[bugcrowd @Bugcrowd]

Got rate-limited. 😩

[bugcrowd @Bugcrowd]

“Is bug bounty really legal? 🤔”

Here’s a quick clarification: 👇

[bugcrowd @Bugcrowd]

The Nuremberg Hive Exchange agenda just dropped ⬇️ We hope to see you October 28. Reserve your spot today! https://t.co/m7lMu3SUnM

[bugcrowd @Bugcrowd]

You can now scroll X and Reddit at the same time! ⏬

If you’re interested in:
➡️ Bug bounty
➡️ Security news
➡️ or anything hacking-related

Follow us here and on Reddit! 🔔

Here’s our official subreddit: 👇
https://t.co/0G6cI75xhF

[bugcrowd @Bugcrowd]

No target yet? Take your pick here: 🎯
https://t.co/uXn9XoMYnQ

[bugcrowd @Bugcrowd]

How to discover and test API endpoints?

Here are some solid tips: 👇

[bugcrowd @Bugcrowd]

Hack and party!🕺

[bugcrowd @Bugcrowd]

Are you seeing a 403 when you access this:

GET /api/v2/admin/users ❌

You can try bypassing it by accessing an older API version:

➡️ GET /api/v1/admin/users
➡️ GET /api/admin/users
➡️ GET /api/V2/admin/users
➡️ GET /api/v2/admin/users with X-API-Version: 1
➡️ GET /api/v2.0/admin/users
➡️ GET /api/beta/admin/users

What else will you try? 👇

[bugcrowd @Bugcrowd]

We are continuously reviewing the mechanics of the Bugcrowd Platform to safeguard triage capacity, uphold signal quality across all engagements, and improve the experience for everyone. Read about our latest update here:
https://t.co/qbfGUyofYd

[bugcrowd @Bugcrowd]

Join our community on Reddit 👇
https://t.co/uutYpP3bH8

[bugcrowd @Bugcrowd]

Stuck on a target? Other hunters have your back.

[bugcrowd @Bugcrowd]

Why should an organization invest in a Live Hacking Event? 🤔

We'll let top hacker Justin Gardner (Rhynorater) explain👇

[bugcrowd @Bugcrowd]

The Hive Exchange is coming to Nuremberg during it-sa Expo & Congress! Reserve your spot today https://t.co/m7lMu3SUnM

[bugcrowd @Bugcrowd]

The average organization sees a 50% increase in critical findings in the six months that follow a live hacking event. These events aren't just about the day-of results...they're the gift that keeps on giving 🎁 https://t.co/XCSNhpeeQE