Learn Bug Bounty

Blog
Learn Bug Bounty

Cache key injection: Smuggling poison through the door

Lire plus ->

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

Lire plus ->

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

Lire plus ->

PimpMyCaido: DOMLogger++, Caido extension

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Lire plus ->

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Lire plus ->

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

Lire plus ->

Vulnerability vectors: server-side request forgery

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Lire plus ->

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Lire plus ->

Vulnerability vectors from YesWeHack: OS command injection

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Lire plus ->

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Lire plus ->

BUG BREAKDOWN: AUTH BYPASS, WORDPRESS AZURE AD SSO PLUGIN

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Lire plus ->

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Lire plus ->

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Lire plus ->

Bug Bounty guide to code analysis from YesWeHack, illustrated with bugs and magnifying glass

Open-source security testing: the Bug Bounty guide to code analysis

Lire plus ->

Open-source security testing: the Bug Bounty guide to code analysis

Lire plus ->

Python pitfalls: Turning developer mistakes into vulnerabilities

Lire plus ->

Python pitfalls: Turning developer mistakes into vulnerabilities

Lire plus ->

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Lire plus ->

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Lire plus ->

Open-source security testing: the Bug Bounty guide to code analysis

Lire plus ->

Showing 9 of 69 articles.

Learn Bug Bounty

Cache key injection: Smuggling poison through the door

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

How to use Claude Code for Bug Bounty: find fast, validate manually

How to use Claude Code for Bug Bounty: find fast, validate manually

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Open-source security testing: the Bug Bounty guide to code analysis

Open-source security testing: the Bug Bounty guide to code analysis

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Open-source security testing: the Bug Bounty guide to code analysis

Produits

Chercheurs

Ressources

A propos

Suivez-nous