PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Researcher Spotlight: Nijagaw

bugcrowd.com | blog | #bug-bounty | #pentesting | #web-security | #mobile | #bugcrowd | #interview | #researcher-spotlight
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd interviews Nijagaw, a UK pentester ranked 8th on its all-time leaderboard with a 99.11% acceptance rate, covering his forensics background, first XSS report and web and mobile hunting focus.
Published
Collected

Related coverage

blog · bugcrowd.com
Agentic vs human offensive security testing: Where AI actually earns its keep
Bugcrowd's CTO and offensive security lead break down where agentic security testing earns trust, where human judgment still wins, and how to roll it out without burning engineering's confidence.
blog · bugcrowd.com
Meet the Bugcrowd! Bug Hunter Profile of Osanda Malith Jayathissa (@OsandaMalith)
Bugcrowd profiles Osanda Malith Jayathissa, a Sri Lankan student who entered bug hunting in August 2013 with an XSS find in Adobe and within a month reached more than 20 organizations' halls of fame.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
Back