PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne, Bountycraft, and Nullcon

hackerone.com | blog | #bug-bounty | #rce | #conference | #microsoft | #community | #google | #nullcon
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's Chief Bounty Officer recaps Nullcon in India: his talk on bug bounty reporting best practices, Google raising its max RCE bounty to $31,337, Microsoft doubling Office 365 bounties, and India's outsized hacker community.
Published
Collected

Related coverage

blog · netspi.com
DEF CON 33: NetSPI’s “Access Everywhere” Experience
NetSPI security experts share key insights from DEF CON 33's "Access Everywhere" theme, from networking with hackers to expanding security expertise through sessions and workshops.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · hackerone.com
What Belongs in an Effective Code Review Checklist?
Comparing checklists from Google, Yelp, Squarespace and Fog Creek, it contrasts effective, priority-focused code review checklists with overbearing ones that encourage nitpicking and get ignored.
blog · hackerone.com
Giving Back Through Code Review
For GoogleServe, PullRequest and Google.org recruited 50 Googlers across 14 offices to code review nonprofit projects like the Wikimedia Commons Android app, catching bugs and reducing technical debt.
blog · hackerone.com
Code Reviewer Spotlight: James Slater
PullRequest reviewer James Slater earned Google's JavaScript Readability certification. A former game sound designer, he stresses code is read more often than written and mentors through comments.
Back