PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How REI Strengthens Security with HackerOne’s Global Security Researcher Community

hackerone.com | research | #bug-bounty | #vulnerability-disclosure | #interview | #application-security | #hackerone | #retail | #rei
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

REI engineer Isaiah Grigsby discusses the retailer's path from private bug bounty to public programs, and how HackerOne's global researcher community strengthens its security testing.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
research · hackerone.com
Why Retail and E-commerce Organizations Trust Security Researchers During the Holiday Shopping Season
Holiday adware surged 227% and malvertising 53%, targeting retailers. REI, AS Watson, and Mercado Libre leaders explain how researchers' diverse skillsets and creativity extend their defenses.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
Back