PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘The level of automation right now is crazy’: GoDiego on why post-auth vulnerabilities are the future of Bug Bounty

yeswehack.com | blog | #bug-bounty | #automation | #interview | #yeswehack | #xxe | #post-auth
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Spanish hunter GoDiego: his first bug — an XXE in a careers 'extract data from Word' feature — plus why he sees automation pushing Bug Bounty toward post-authentication vulnerabilities.
Published
Collected

Related coverage

blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
YESWEHACK PROPHILE ON HISXO
A YesWeHack 'Prophile' spotlight from April 2020 on France-based ethical hacker HisXO, covering his path from penetration tester to active bug bounty hunter and his favourite tools.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
vulnerability · yeswehack.com
How we help our clients step-by-step in their Bug Bounty journey
Interview with YesWeHack's Head of Customer Success on guiding clients through their bug bounty journey: scoping and launching programs, keeping them attractive to researchers, managing relationships.
vulnerability · yeswehack.com
YESWEHACK PROPHILE ON SONNY
A YesWeHack 'Prophile' spotlight from July 2020 featuring ethical hacker Sonny, part of a series profiling members of the bug bounty community and their hunting stories.
Back