PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Community spotlight: Just Eat Takeaway.com

bugcrowd.com | blog | #bug-bounty | #appsec | #attack-surface | #bugcrowd | #case-study | #crowdsourced-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Just Eat Takeaway.com reflects on seven years of a managed Bugcrowd bug bounty, leveraging diverse researchers to cover its broad multi-brand attack surface, from APIs to payment systems.
Published
Collected

Related coverage

blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
vulnerability · projectdiscovery.io
Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud
Elastic ran ~50,000 servers across AWS, Azure, and GCP and adopted ProjectDiscovery Cloud, scanning 14,500 external assets in under five minutes after outgrowing legacy scanners like BitSight.
vulnerability · projectdiscovery.io
How Paddle Strengthened Its Security Posture with ProjectDiscovery
Paddle consolidated scattered Nuclei and Subfinder scans onto ProjectDiscovery, centralizing attack surface visibility, cutting discovery from days to hours, and supporting PCI DSS and SOC 2 audits.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back