PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacker Spotlight: Interview with filedescriptor

hackerone.com | research | #bug-bounty | #community | #hackerone | #hacker-interview | #filedescriptor | #hong-kong
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hong Kong hacker @filedescriptor hacks Twitter, Google, and GitHub for fun and familiarity, ranks in HackerOne's top percentile, and gives back via security research and YouTube videos.
Published
Collected

Related coverage

blog · hackenproof.com
Hacker Q&A with Yassine Aboukir
A Hacken Cup Q&A with security analyst Yassine Aboukir: from teenage tinkering to 11th on the HackerOne leaderboard, and why bug hunting is a passion first.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · projectzero.google
Welcome to the new Project Zero Blog
Announcement post introducing Project Zero's redesigned blog, explaining the migration, new layout and features, and where readers can find the archive of past security research.
research · volexity.com
Democracy in Hong Kong Under Attack
Over the last few months, Volexity has been tracking a particularly remarkable advanced persistent threat (APT) operation involving strategic web compromises of websites in Hong Kong and Japan. In both […]
Back