PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Supporting Researcher Success through Education & Collaboration

bugcrowd.com | research | #burp-suite | #training | #education | #collaboration | #ssrf | #xxe | #crowdmatch | #bugcrowd-university | #researcher-collaboration | #researcher-resources
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd added five Bugcrowd University modules on Burp Suite, SSRF, XXE, and recon, verified skills matching, and researcher collaboration with joint submissions and reward splitting.
Published
Collected

Related coverage

blog · bugcrowd.com
Bugcrowd University – What’s New?
Bugcrowd University adds five free modules at DEF CON: advanced Burp Suite, SSRF, XXE injection, GitHub recon and sensitive data exposure, plus recon—each targeting high-impact P1–P3 bugs.
blog · wiz.io
Introducing the Wiz Certified Program: Validate Your Expertise and Showcase Your Mastery!
Wiz launches its certification program, starting with the Wiz Certified Cloud Fundamentals exam—designed to validate hands-on Wiz skills and give cloud security professionals a recognized credential.
blog · netspi.com
The Evolution of Cyber Security Education and How to Break into the Industry
Tufts professor Ming Chow discusses how security education evolved from scarce textbooks to information overload, and why newcomers struggle to find trustworthy guidance on breaking into the industry.
vulnerability · netspi.com
Advisory: XXE Injection in Oracle Database (CVE-2014-6577)
Oracle Database's XML parser (11.2.0.3-12.1.0.2) resolves external schemas, so XXE via extractvalue() lets a CREATE SESSION holder exfiltrate data over HTTP/FTP, port-scan, or trigger SSRF.
research · bugcrowd.com
How CrowdMatch Strengthens Crowd Engagement and Improves Researcher Rewards
Bugcrowd's CrowdMatch ML engine pairs researchers with fitting programs using a decade of Security Knowledge Graph data, lifting valid submissions 70%, payouts over 80%, and doubling P1-P3 findings.
research · bugcrowd.com
CrowdMatch: Auto-curated crowds for better, faster results
Bugcrowd's CrowdMatch auto-matches vetted researchers to programs by skills and use cases, addressing the security talent shortage and improving submission quality over conventional crowdsourcing.
Back