PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to find bugs on a hardened target using gadgets

bugcrowd.com | blog | #bug-bounty | #methodology | #gadgets | #hardened-targets | #live-hacking-events | #vulnerability-chaining
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

On hardened targets, hunters can chain small gadgets, minor bugs, misconfigurations and quirks noted over time, into P1-level impact, a patient methodology top hunters use at live hacking events.
Published
Collected

Related coverage

blog · portswigger.net
Lame bugs for a rainy day
Even tight apps yield 'lame' issues—informative errors, loose cookie scope, session fixation, directory listings. Stuttard says report them anyway: chained low-risk flaws can fully compromise an app.
blog · xbow.com
MITRE ATT&CK Coverage Assessment: How to Measure Defensive Readiness
Most ATT&CK coverage heatmaps are built on assertion, not evidence. Here’s the methodology that makes numbers defensible, with the help of autonomous continuous testing.
blog · yeswehack.com
‘I’m not the kind of person to rely on tooling’: Sn0rkY shares his Bug Bounty story and top tips
French hacker Sn0rkY shares his Bug Bounty methodology, views on AI tooling and advice for hunters in this YesWeHack interview.
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · hackenproof.com
Breaking Solidity at Scale: 0-Day AI Smart Contract Auditing and the Workflow That Catches What AI Misses
HackenProof guest article by Zakaria Eddafri on an AI-assisted smart contract auditing workflow that cuts false positives and hallucinations while improving attack-path discovery.
blog · hackenproof.com
What is Dual Defense? How Double-Layered Audits Improve Cybersecurity
An explainer on DualDefense, HackenProof's two-layer security model pairing a professional audit with a crowdsourced review by ethical hackers to catch what single audits miss.
Back