PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacker Q&A with André Baptista: From CTF Champ to h1-202 MVH

hackerone.com | research | #bug-bounty | #ctf | #interview | #live-hacking | #hacker-qa | #h1-202
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with André Baptista, who went from CTF champion to Most Valuable Hacker at H1-202 within a month of his first bug, on how CTF-honed skills in binary exploitation transfer to bug bounties.
Published
Collected

Related coverage

blog · hackerone.com
H1-202 Recap: Mapbox Pays Out Nearly $65,000 in One Day
Recap of H1-202 in Washington, D.C.: 27 hackers reported 103 vulnerabilities against Mapbox in nine hours, earning $64,925, plus a CodeVA community day and an Open Source Hero award.
blog · hackerone.com
Hack Your Way to the White House
Solve the h1-202 CTF and submit a write-up by Feb 23, 2018 for a trip to HackerOne's first Washington, D.C. live hacking event on March 25, where $100,000+ in bounties is up for grabs.
blog · hackenproof.com
Hacker Q&A with Yasser Ali
A HackenProof Q&A with hacker Yasser Ali covering his experience in the bug bounty community and his work as a triage specialist.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · calif.io
The Taking of FreeBSD One Two Three
# The Taking of FreeBSD One Two Three Three pre-auth remote kernel exploits behind one TCP port that FreeBSD has decided to document rather than fix. Ryan A. August 6, 2026 freebsdmadbugs Contents...
Back