PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Illustrated Guide to Bug Bounties Step #2: Launching

bugcrowd.com | blog | #bug-bounty | #bugcrowd | #triage | #program-launch | #deduplication | #crowdcontrol
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Step two of Bugcrowd's illustrated guide: submissions arrive quickly, Crowdcontrol filters duplicates and false positives, engineers validate findings, and payments go out via PayPal or Payoneer.
Published
Collected

Related coverage

blog · bugcrowd.com
Optimize Your Time in Platform With New Crowdcontrol Workflows and Automation
Bugcrowd's Crowdcontrol update: self-serve onboarding for VDP and bug bounty programs, premium SLAs with the P1-P5 scale, and automation for accepting submissions and paying rewards faster.
blog · bugcrowd.com
Upwork Takes Bug Bounty Program Public With Bugcrowd
Upwork's head of information security Teza Mukkavilli announces a public bug bounty on Bugcrowd's Crowdcontrol platform, building on the private program to keep client and freelancer data secure.
vulnerability · bugcrowd.com
Bugcrowd Announces the Availability of Self-Service Vulnerability Disclosure Programs
Bugcrowd launches self-service Vulnerability Disclosure Programs: a structured intake and triage pipeline for bug reports, with managed triage for the first 15 or 75 submissions.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back