PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[Guest Blog] EARN CPES WITH BUG BOUNTY

bugcrowd.com | research | #bug-bounty | #bugcrowd | #researcher-resources | #isc2 | #cpe
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An (ISC)² guest post explains members can earn CPE credits via Bugcrowd bounties: up to 5 credits per valid bug, capped at 15 yearly, after linking an ISC2 number in the researcher profile.
Published
Collected

Related coverage

research · bugcrowd.com
Supporting Researcher Success through Education & Collaboration
Bugcrowd added five Bugcrowd University modules on Burp Suite, SSRF, XXE, and recon, verified skills matching, and researcher collaboration with joint submissions and reward splitting.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back