Intigriti

Bug bounty & VDP platform trusted by the world’s largest organisations! 🌍

[Intigriti @intigriti]

We have launched a new page to improve AI safety and security.

Whether you are using AI to build faster or incorporating AI features into your product, this resource shows how Intigriti helps customers to design an AI program suited to their security maturity, fueled by human ingenuity.

https://t.co/IRaE6iWER5

[Intigriti @intigriti]

@TomNomNom That was it! We hope you've learned something new (and enjoyed) this thread!

If you have enjoyed this thread:
1. Follow us @INTIGRITI for more of these threads! 🐛
2. Retweet the first Tweet to share it with your friends 💙

[Intigriti @intigriti]

We just dove into our shelf of archived bug bounty write-ups from the most notable hackers! 🤠

In this issue, we selected 5 compelling articles (that are still relevant today) to share with you, from which you can learn something new! 😎

🧵 👇

[Intigriti @intigriti]

5️⃣ SQL Injection - MySQL comment: the double dash mystery

This researcher documents a widely misunderstood MySQL behaviour: the -- comment sequence requires a trailing space to function, causing many SQL injection payloads to silently fail. A short but essential read for anyone testing for SQLi.

https://t.co/UpfKj37xdj

[Intigriti @intigriti]

@0xwer8 👀👀

[Intigriti @intigriti]

@MAbdullah78619 Great work! Well done!

[Intigriti @intigriti]

@rgjny_ @redbull

[Intigriti @intigriti]

@cat_w1th_hat Excellent job as usual!

[Intigriti @intigriti]

@Vansh_95a @hackerspider1 Nice work! We hope to see your second report coming in soon!

[Intigriti @intigriti]

@dinn_l1 Excellent job!

[Intigriti @intigriti]

We're live at OrangeCon! 🤠

Come find us at the Bug Bounty Village (room 5) for a live CTF challenge, bug bounty talks, community, and of course, some cool swag! 😎

[Intigriti @intigriti]

OrangeCon is tomorrow and our Bug Bounty Village at Meervaart Theatre in Amsterdam is ready for you! 🤠

Stop by to join us for a live CTF, talks on breaking into bug bounty and the life of a triager, space to connect with the community, and some cool swag! 😎

See you there! Details below! 👇

[Intigriti @intigriti]

Metis by @arm just got significantly better! 🤠

Metis is an open-source tool that uses LLMs to perform deep security code reviews on your codebase, catching complex vulnerabilities such as logic and design flaws that traditional SAST tools typically miss! 🧐

In a new internal benchmark, Metis now finds nearly all vulnerabilities that traditional SAST tools simply fail to flag. This tool can be deployed against open-source bug bounty targets or TypeScript source code extracted from JS sourcemaps!

Check it out! 👇
https://t.co/X5L95lKYGt

[Intigriti @intigriti]

@cyber_rekk 😅😅

[Intigriti @intigriti]

@MAbdullah78619 Nice work!!

[Intigriti @intigriti]

@5mart__ Hard work always pays off!! 💪