YesWeHack ⠵

Offensive Security & Exposure Management Platform

🎯

[YesWeHack ⠵ @yeswehack]

Claude Code, Codex or Gemini CLI for Bug Bounty? 🤔

We put all three through blind PortSwigger labs 🧪

These tests aren’t benchmarks, but the patterns observed say a lot about where each agent could fit in your workflow 👇
https://t.co/0loI0IMtAj

[YesWeHack ⠵ @yeswehack]

Cache poisoning gets a lot more interesting when the poison goes straight into the key 👀

@Brumens2's DEF CON talk explores cache key injection, scheme fragments and the unexpected bugs that can follow!

Read the full research below 👇
https://t.co/dnbn4NLiyu

[YesWeHack ⠵ @yeswehack]

Update: Fix applied - we're back 💪

[YesWeHack ⠵ @yeswehack]

Update: Fix applied - we're back 💪

[YesWeHack ⠵ @yeswehack]

🔒 Precautionary Security Update

Following the recent disclosure of two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, "PHP2Shell"), we have proactively placed our platform in maintenance mode.

To safeguard the data and security of our clients and users, access is temporarily blocked while our team applies the necessary patches across our infrastructure.

We will provide an update here as soon as maintenance is complete and platform access is restored. Thank you for your patience and understanding.

[YesWeHack ⠵ @yeswehack]

@CHF_KARAS_ That's great! Congratulations 👏

[YesWeHack ⠵ @yeswehack]

Want to sharpen your IDOR, stored XSS and information disclosure skills? 🧠 The hunters who topped our 2025 leaderboards for these bugs – @XelBounty, @Chackal__, @drak3hft7 – shared their best-practice tips 👇
https://t.co/uhs59KkXWG

[YesWeHack ⠵ @yeswehack]

@alex32_onate Enhorabuena! 👏

[YesWeHack ⠵ @yeswehack]

🏁 #SPIRITCYBER26 has come to a close after weeks of persistence, creativity and pushing the limits.

Huge congratulations to the top five:
🥇nullIoT
🥈One Prompt to Pwn Them All
🥉Peenoise
🏆Hamtarou
🏆Undefined Behavior

👏 Big shoutout to all the team that took part in the qualifiers. Every valid report helped push the challenge further and strengthen the connected technologies supporting Singapore’s #SmartNation.

🤝 Proud to have joined forces again with @CSAsingapore for another round of hacking for a good cause.

Till next year!

[YesWeHack ⠵ @yeswehack]

Hello,

We are unable to provide any information regarding this subject.
We invite you to contact [email protected] who are in communication with the relevant teams.
If you've already contacted them, they'll treat your ticket in due course.

Thank you for your understanding,
The YesWeHack team

[YesWeHack ⠵ @yeswehack]

@mfaizanqadeer Dojo #55 conquered! 💪 Nicely done

[YesWeHack ⠵ @yeswehack]

@0xYinji Congratulations on another bounty! 🎉 Every finding is a step forward. Keep up the great work!

[YesWeHack ⠵ @yeswehack]

⌛ Last chance to shake up the leaderboard.

The #SPIRITCYBER26 finalists know their targets well, but one overlooked detail or breakthrough could still change everything. ⚡Final day starts now!

#SICW2026 @CSAsingapore

[YesWeHack ⠵ @yeswehack]

💡 Behind every finding: trial and error, dead ends, and sometimes another hunter asking, “Have you tried this?”

That’s the power of the #BugBounty community. Different minds with a shared goal of making digital systems safer for all.

Leading the pack at #SPIRITCYBER26: @bytehx343 @0xakm, @mgthura404 from Team nullIoT🔥

Stay tuned for the final push tomorrow.

#SICW2026 @CSAsingapore

[YesWeHack ⠵ @yeswehack]

👀 #SPIRITCYBER26 so far: 10% typing, 90% staring intensely at the screen.

Our 5 finalist teams spent the day pulling apart these IoT devices and refining their exploits. Some findings come quickly, but the interesting ones usually don’t.

Back tomorrow for Day 2! 🔎

#SICW2026 @CSAsingapore

[YesWeHack ⠵ @yeswehack]

@TheHood12_5 That's great! Congratulations 👏

[YesWeHack ⠵ @yeswehack]

🇸🇬 Today, the #SPIRITCYBER26 IoT Bug Bounty finals officially begin at @SICWSG, in collaboration with @CSAsingapore!

☝️ 30 teams. 5 weeks of hacking. 5 finalists heading to Singapore:
🔹 nullIoT
🔹 Peenoise
🔹 One Prompt to Pwn Them All
🔹 Hamtarou
🔹 Undefined Behavior

Now the challenge continues with three days of live hacking to dig deeper, prove impact and help strengthen the security of critical #IoT systems.

Good luck to all and let the hacking begin 💥

#HackThePlanet

[YesWeHack ⠵ @yeswehack]

“Your main hacking tool should be your own knowledge and curiosity,” says @_Sn0rkY, a longstanding hunter on our Bug Bounty Programs 🧠

In a video just published on our blog, the hacker shares his backstory, hunting approach and perspective on AI 👇
https://t.co/9oe3LxsNSe

[YesWeHack ⠵ @yeswehack]

Hacking complete. Leaderboard locked. 🔒

🥇 PyUs3r
🥈 bofill3
🥉 tonysec
🌈 Full Spectrum: @deb_security
💥 Biggest Impact: bofill3

Thanks @BancoGalicia, @BugBountyArg & @Ekoparty for a great round two! 🚀

✅ Final leaderboard: https://t.co/U3XwMmCqjG