PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘I found a CSRF and could deploy code through an enterprise’s App Store account’: yassine_eal’s Bug Bounty story

yeswehack.com | blog | #bug-bounty | #web-security | #app-store | #interview | #csrf | #hunter-story
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bug hunter yassine_eal explains how he picks targets by available time and recalls his proudest find — a CSRF that gave admin control over an enterprise's app-store code deployments.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
Back