Learn Bug Bounty

Blog
Learn Bug Bounty

How to use Gemini CLI for Bug Bounty research: analyse evidence, validate manually

Read More ->

Cache key injection: Smuggling poison through the door

Read More ->

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

Read More ->

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Read More ->

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Read More ->

PimpMyCaido: DOMLogger++, Caido extension

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Read More ->

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Read More ->

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Read More ->

Vulnerability vectors: server-side request forgery

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Read More ->

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Read More ->

Vulnerability vectors from YesWeHack: OS command injection

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Read More ->

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Read More ->

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Read More ->

BUG BREAKDOWN: AUTH BYPASS, WORDPRESS AZURE AD SSO PLUGIN

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Read More ->

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Read More ->

Bug Bounty guide to code analysis from YesWeHack, illustrated with bugs and magnifying glass

Open-source security testing: the Bug Bounty guide to code analysis

Read More ->

Open-source security testing: the Bug Bounty guide to code analysis

Read More ->

Python pitfalls: Turning developer mistakes into vulnerabilities

Read More ->

Python pitfalls: Turning developer mistakes into vulnerabilities

Read More ->

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Read More ->

Showing 9 of 70 articles.

Learn Bug Bounty

How to use Gemini CLI for Bug Bounty research: analyse evidence, validate manually

Cache key injection: Smuggling poison through the door

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

How to use Claude Code for Bug Bounty: find fast, validate manually

How to use Claude Code for Bug Bounty: find fast, validate manually

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Open-source security testing: the Bug Bounty guide to code analysis

Open-source security testing: the Bug Bounty guide to code analysis

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Products

Researchers

Resources

Company

Follow us