PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Aim High...Find, Fix, Win!

hackerone.com | vulnerability | #bug-bounty | #government | #milestone | #dod | #hack-the-air-force
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Hack the Air Force results: 207 valid vulnerabilities over 25 days, $130,000+ in bounties — DoD's largest challenge, open to hackers from five partner nations, with a first report in under a minute.
Published
Collected

Related coverage

vulnerability · hackerone.com
$20M in Bounties Paid and $100M In Sight
HackerOne crosses $20 million in bounties paid to a 100,000-hacker community, with 50,000+ vulnerabilities fixed; it credits DoD's Hack the Pentagon as far cheaper than a traditional audit.
blog · hackerone.com
Interview with Hack the Air Force Winner, @CableJ
Interview with 17-year-old Jack Cable (@CableJ), who topped Hack the Air Force with 30 valid bugs: from a negative-transfer bank flaw to rookie honors at H1-702, plus advice on coding and hacking.
vulnerability · hackerone.com
How Federal Agencies Use Vulnerability Disclosure Policies to Level Up Security
Vulnerability disclosure policies are becoming a requirement for federal agencies. The article recaps HackerOne's government work since Hack the Pentagon and five components of an effective VDP.
vulnerability · hackerone.com
Why Every Federal Agency Needs a VDP
A CISA draft directive requires all US federal civilian agencies to publish a vulnerability disclosure policy, following the DoD VDP model that surfaced 12,000+ vulnerabilities in three years.
vulnerability · hackerone.com
8 High-impact Bugs and How HackerOne Customers Avoided a Breach: SQL Injection
This series entry covers SQL injection, fifth most rewarded on HackerOne, with disclosed Starbucks and US DoD reports showing how verbose errors and XML upload endpoints lead to database compromise.
vulnerability · hackerone.com
How the Risk-Averse DoD Learned to Stop Worrying and Love the Hackers
A Security@ 2019 panel traces how the US DoD embraced hackers: its VDP and bounties surfaced 11,000+ valid vulnerabilities, saved taxpayers $64 million in three years and returned roughly 800% ROI.
Back