PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacker Spotlight: Interview with benteveo

hackerone.com | vulnerability | #bug-bounty | #rce | #open-source | #hacker-interview | #benteveo | #droopescan | #verizon-media
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Argentine hacker Pedro Worcel (@benteveo), creator of the open-source droopescan tool, has found RCE, SSRF, and XSS bugs since 2014 and was named Verizon Media hacker of the year.
Published
Collected

Related coverage

vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · hackerone.com
Hacker Spotlight: Interview with hazimaslam
Pakistani hacker @hazimaslam got hooked on web security in 2013 after a friend's Yahoo account was hacked, and has since submitted more than 250 vulnerability reports on HackerOne.
vulnerability · hackerone.com
The World’s Largest Live Hacking Event
HackerOne and Verizon Media designed their second virtual live hacking event to be the largest ever, expanding inclusivity worldwide and maximizing security impact in a remote-only format.
vulnerability · hackerone.com
Hacker Spotlight: Interview with dawgyg
Interview with Tommy DeVoss (@dawgyg), ranked 20th on HackerOne with 484 vulnerabilities, who went from teenage hacking convictions to becoming a million-dollar bug bounty hunter in 2019.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
Back