PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Researcher Spotlight – Fuzzybear

bugcrowd.com | blog | #bug-bounty | #automation | #bugcrowd | #interview | #private-programs | #researcher-spotlight | #bug-hunting-tips
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Researcher Spotlight interviews Fuzzybear, #43 on Bugcrowd with a 100% acceptance rate and 65 bugs found, mostly in private programs. His advice: learn a vuln class manually before automating it.
Published
Collected

Related coverage

blog · bugcrowd.com
Meet the Bugcrowd! Bug Hunter Profile of Osanda Malith Jayathissa (@OsandaMalith)
Bugcrowd profiles Osanda Malith Jayathissa, a Sri Lankan student who entered bug hunting in August 2013 with an XSS find in Adobe and within a month reached more than 20 organizations' halls of fame.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back