Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[Guide] Getting Started with OWASP’s Bug Bounties

bugcrowd.com | research | #bug-bounty | #open-source | #owasp | #guide | #zap | #java-security

Summary

OWASP now runs Bugcrowd bounties for four open source projects: ZAP, Java HTML Sanitizer, CSRFGuard and JavaEncoder. A new guide helps researchers get started on these download-and-deploy targets.
Published
Collected

original ↗

Related coverage

  1. OWASP’s Open Source Bug Bounty Launch (bugcrowd.com)
  2. Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition (wiz.io)
  3. Getting Started – Bug Bounty Hunter Methodology (bugcrowd.com)
  4. So you want to be a web security researcher? (portswigger.net)
  5. GeoNetwork - PreAuth Remote Code Execution (ethiack.com)
  6. From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse (lab.ctbb.show)

back