Cheap Bugs

Your friendly neighborhood bug feed.

[Cheap Bugs @cheapbugs]

I guess it's just free bugs until I hit 500 🔥🪲🔥

[Cheap Bugs @cheapbugs]

Shitpost successful, Blue acquired 😆
Next hurdle, need 500 followers to enable subscriptions 😬

[Cheap Bugs @cheapbugs]

@wireglitch @deanpierce RIP. Looks like I've got a lot of shit-posting to do before it will let me activate Blue so I can start taking subscriptions 😢

[Cheap Bugs @cheapbugs]

@wireglitch @deanpierce 👀

[Cheap Bugs @cheapbugs]

April was a fun month. We've got a nice clean SQLi, and some pretty wide reaching XSS bugs across two platforms. Want to see? Subscribe now!

[Cheap Bugs @cheapbugs]

@wireghoul True, but that hasn't been much of a problem. Most appsec bugs get simultaneously reported to vendors, and if not, the rules are pretty lax.

[Cheap Bugs @cheapbugs]

Holy cow, a record of 11 SQL injections submitted this month, and all by the same researcher, who took home the entire February prize pool!

[Cheap Bugs @cheapbugs]

Wow, crazy month. SQL injections, a command injection, and our first local root exploit https://t.co/GDJ5ctr0HO Not a subscriber? do it now!

[Cheap Bugs @cheapbugs]

The December report is now live: https://t.co/ZpYn90TD7K Still not a member? Sign up today for full archive access! https://t.co/8b8HYZX0Sf

[Cheap Bugs @cheapbugs]

{${print%20`echo%20%27November%20CheapBugs%20Report%20is%20out%20now!%27%26%26cat%20%2Fetc%2Fshadow`}}

[Cheap Bugs @cheapbugs]

The October report is out! @d1m0ck dominated again with some crazy good findings, and @tbmnull provided some pretty hilarious bugs as well.

[Cheap Bugs @cheapbugs]

The October report is out! @d1m0ck dominated again with some crazy good findings, and @tbmnull provided some pretty hilarious bugs as well.

[Cheap Bugs @cheapbugs]

The September report is live! @d1m0ck really cleaned up this month, taking over 100 dollars of the prize pool. Great work everyone!

[Cheap Bugs @cheapbugs]

And we have our first bug of the month! An interesting little diddy which can be used to hijack the SSO login form for a large tech company.

[Cheap Bugs @cheapbugs]

After a record breaking point spread for the last payout, September has been super quiet. Right now a single XSS could take home everything.

[Cheap Bugs @cheapbugs]

annd.. were back! The Vegas hangovers have faded and we've combined July and August payouts into one, and are doing them a week early!

[Cheap Bugs @cheapbugs]

Hey CheapBugs followers. If you happen to be in Vegas this fine evening (Saturday), we are doing a cheap bugs mixer in Bally's 2602 at 9pm.

[Mickey @HackingThings]

Subscribe to @cheapbugs , its hilarious.

[Cheap Bugs @cheapbugs]

The May Cheap Bugs report is now online! We've got a great bug from in a major retail chain, and a whole lot of Malaysia. Thanks everyone!