PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Amazon's Security Researcher Collaboration: Highlights from H1-213

hackerone.com | research | #bug-bounty | #hardware-security | #hackerone | #live-hacking-event | #amazon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Forty-eight security researchers from as far as Australia and Japan joined Amazon in Santa Monica for H1-213, a HackerOne live hacking event testing digital assets and hardware.
Published
Collected

Related coverage

research · hackerone.com
HACK HARD. HAVE FUN. INCREASE SECURITY
Amazon's h1-2103 virtual live hacking event with HackerOne drew 50+ researchers over 10 days, paying $832,135 for vulnerabilities across Amazon's core assets — its second-highest paying event ever.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · eshard.com
Security investigations for critical missions
Advanced security testing platforms for hardware and software investigations. Collaborative tools, proven attack libraries, and expert services for security teams.
research · eshard.com
Security investigations for critical missions
Advanced security testing platforms for hardware and software investigations. Collaborative tools, proven attack libraries, and expert services for security teams.
Back