PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CrowdMatch: Auto-curated crowds for better, faster results

bugcrowd.com | research | #bug-bounty | #attack-surface-management | #bugcrowd | #crowdsourced-security | #vulnerability-disclosure | #pentest | #crowdmatch | #knowledge-graph | #crowdsourcing | #pen-testing | #talent-shortage
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd's CrowdMatch auto-matches vetted researchers to programs by skills and use cases, addressing the security talent shortage and improving submission quality over conventional crowdsourcing.
Published
Collected

Related coverage

blog · bugcrowd.com
Get to know the Bugcrowd Security Knowledge Graph
Bugcrowd explains its Security Knowledge Graph, a graph database of a decade's vulnerability, asset, and hacker skill data that powers CrowdMatch AI, triage, reporting, and recommendations.
research · bugcrowd.com
How CrowdMatch Strengthens Crowd Engagement and Improves Researcher Rewards
Bugcrowd's CrowdMatch ML engine pairs researchers with fitting programs using a decade of Security Knowledge Graph data, lifting valid submissions 70%, payouts over 80%, and doubling P1-P3 findings.
research · bugcrowd.com
Supporting Researcher Success through Education & Collaboration
Bugcrowd added five Bugcrowd University modules on Burp Suite, SSRF, XXE, and recon, verified skills matching, and researcher collaboration with joint submissions and reward splitting.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · certik.com
Inside CertiK's Independent Security Research on Besu
CertiK's chaos-engineering-style testing against a private multi-node Besu testnet uncovered five resource-exhaustion vulnerabilities, patched in Besu 26.7.1 and credited in Besu's release notes.
Back