Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bug Bounty Etiquette: Our Guide to Polite Hacking (Part Two)

projectdiscovery.io | blog | #bug-bounty | #responsible-disclosure | #best-practices | #projectdiscovery | #etiquette

Summary

Part two of the etiquette series: don't flood targets with aggressive scans that trip IDS or risk DoS, don't ignore program rules or forbidden tools, don't submit noise, and don't beg for rewards.
Published
Collected

original ↗

Related coverage

vulnerability · projectdiscovery.io
Bug Bounty Etiquette: More than Ethical Hacking (part one)
Part one of the bug bounty etiquette series covers the dos: always get permission before testing, stay in scope, be transparent, and take your time—soft skills that build reputation and career.
blog · projectdiscovery.io
Getting Started with ProjectDiscovery in Linux and Windows
A step-by-step guide to installing ProjectDiscovery tools like Nuclei, Subfinder, and Katana on Linux and Windows, covering Go installation, PATH configuration, and fixing common CLI errors.
tool · projectdiscovery.io
How Neo's Agent Architecture Evolved: From One Agent → Plan, Execute & Verify
Neo evolved from a sandboxed agent into a plan-execute-verify architecture with parallel subagents, driven by context, duration, and quality limits. Longest runs hit 14.7 hours and 2,398 tool calls.
vulnerability · projectdiscovery.io
Nuclei Templates - April 2026
Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
vulnerability · projectdiscovery.io
From Detection to Validation: Fixing Broken Vulnerability Workflows
Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.
back