For the past year and a half, the OECD has been defining guidelines around efficient vulnerability reduction. The final report is out today and is well worth a read. As active contributors to this guideline, we have summarised the main takeaways below.

It is not the first time an international institution enters the playfield. The OECD report builds upon earlier work: we have come a long way. Still, we need to pursue action to inscribe vulnerability non-proliferation in policy worldwide.

Our TL;DR: It is time to enforce public policies encouraging coordinated vulnerability disclosure for public and private organisations alike. That effort must happen on both the national and international levels. The 

 is also a great educational tool for policy-makers.

More detailed key takeaways are below. Chunks in 

Coordinated vulnerability disclosure (CVD) is an efficient way to identify and fix vulnerabilities. Tools such as vulnerability disclosure policies (VDP) and bug bounty (referred to as 

) are all ways to do so. The report builds upon those observations to provide public policy guidance. 

“As stakeholders involved in CVD are often located in different countries, it is expected that such guidance would help reduce potential fragmentation of approaches across jurisdictions and contribute to reducing digital security risk globally.” 

An abridged version of the most salient points is below.

 Economic and social challenges prevent stakeholders from adopting good practice, including a lack of awareness and co-operation, limited market incentives, legal barriers, limited trust in government, and a lack of resources and skills.

Treating vulnerabilities is a shared responsibility 

amongst vulnerability owners. In the era of digital transformation, it is grossly irresponsible to develop code and maintain systems while ignoring the consequences of the vulnerabilities that may emerge over time. Producers and system owners need to establish processes to treat vulnerabilities systematically and proactively in order to decrease risk for themselves and others.

Ethical hackers and white hats can help substantially reduce digital security risk

 by reporting vulnerabilities. But they are sometimes threatened with legal proceedings by some businesses and governments, which creates a chilling effect. They need safe harbours.

Stakeholders often do not trust governments. 

Stockpiling and weaponising vulnerabilities, implanting backdoors, and buying vulnerabilities on black or grey markets affect stakeholders’ trust.

Governments can take many actions to encourage the adoption of good practice

 for vulnerability treatment, such as changing the culture related to vulnerabilities, protecting ethical hackers, leading by example, addressing the grey market, and co-operating internationally.

There is no such thing as a vulnerability-free service. So, we need to mainstream approaches that enable vulnerability non-proliferation and reduction. To hunt for and fix security weaknesses needs to become a core priority for cybersecurity professionals and decision-makers alike.

 The reality is best described as “vulnerable-by-default”. Acknowledging this does not lessen the value of an organisation or a leader. On the contrary, it makes them more trustworthy. The best way to approach vulnerabilities is to bless the need to fix them.

 To be responsible, vulnerability disclosure must be coordinated. 

, CVD is not a product; it is a process. Knowing who does what to reduce digital risk must not be a modern 

. Any company or public organisation can implement CVD and enable a direct report of the vulnerability to the most relevant entity. It can also involve an intermediary. In both cases, the approach is a coordinated vulnerability disclosure.

Ethical hackers can make significant contributions to increasing the digital security of products and services. Yet, legal uncertainty bars an overwhelming majority of well-intentioned people to help reduce risk. 

, times and times again, for removing ambiguity and pacifying the legal environment. Doing so will remove unnecessary obstacles to coordinated vulnerability disclosure. An international model in this field is essential to avoid all uncoordinated public disclosure. As such, guaranteeing protection for ethical security researchers is paramount.

 The global and lasting reduction of risk will come from public-private cooperation. Identifying and fixing security vulnerabilities is a shared responsibility. Being open about how you protect users means leading by example. Besides, it builds trust. Government actors are particularly at aim here: public scrutiny has identified many cases of acquiring and weaponising vulnerabilities. 

 is a first-time signatory, is the most prominent international convener of efforts to foster trust in governments’ role.

 Still, slow action or inaction have an increasingly severe impact against the backdrop of pervasive digital transformation. Policy-makers need to address it both nationally and internationally. 

 to inform country-level and EU legislators about what to tackle and how to further global standards.

Despite the clear security and economic impact of vulnerabilities, policy attention has shied away. Drawing policy-makers to more substantial commitments to vulnerability treatment is a sound way to enforce safer cyberspace for all. But we need not wait for legal and regulatory to act now: the tools exist and are within reach. Use them to find and fix vulnerabilities, that is, to help keep the Internet safer.

Read our acclaimed wrap-up of ways to promote sound policy on coordinated vulnerability disclosure at the national and the EU levels.

You have been wondering how to approach vulnerability reduction in everyday operations? Wonder no more, we have the right guide right here.

Sound policy for a vulnerable-by-default cyberspace

 Tracker is packed with new integration features to help DevSecOps teams identify, track, and triage bugs faster and more securely. 

 Deputy CTO, YesWeHack, explores the highlights of this turn-key vulnerability management and bug tracking integration solution.

Faced with fast disruptive change, organizations need to innovate faster – or risk being overtaken by new, nimble, and leaner competitors. DevSecOps plays a vital role here, baking security into the software development workflow, for the accelerated roll-out of trusted code and ultimately the faster launch of new products and services.

Every forward-thinking DevSecOps strategy has one or more bug tracking tools in its armory, to track and triage bugs during the development lifecycle and shield software from cyber-attacks. Too often however, the integration between bug trackers and a vulnerability management solution like 

 can be slow and labor-intensive, undermining the agility and collaboration demanded by developers. The user experience can be unintuitive, for example, or the workflow requires excessive manual intervention.

 comes in. In the spirit of constant improvement, our Tracker 2.0 provides turnkey, seamless, and secure integration with your preferred bug tracking toolset, boosting the strength and scope of your vulnerability management strategy.

Developed in close consultation with our customers, Version 2.0 is geared to helping DevSecOps teams work faster and smarter. It is packed with new integration functionality to connect with deployed bug trackers more easily and communicate vulnerabilities, remediate issues, and ensure swift bug resolution and closure. It supports GitHub, GitLab, Jira, and Jira Cloud bug trackers, and support for additional trackers will be announced in the coming months.

: Security and development teams have all the data associated with vulnerability reporting at their fingertips to triage vulnerabilities using their chosen bug tracker(s). There’s no manual ‘copy and pasting’ of content – teams are connected to a synchronized, complete view of the workflow and data.

In version one, for example, Bug Bounty program managers could only ‘push’ vulnerability reports. Now they can ‘push’ comments as well as the reports themselves – whether it is tips on how to reproduce the vulnerability or how to fix it. A complete historical log of those exchanges also offers traceability while ensuring nothing is overlooked.

: Our Tracker 2.0 is made with security in mind. Managers have complete control over what information is disclosed – and to whom. In situations where developers do not have access to the relevant vulnerability, for example, managers can determine what information they wish to disclose, reducing friction and delays between application and security teams.

For added security, YesWeHack Tracker 2.0 is also non-invasive: it doesn’t push information from YesWeHack to the customer server, it pulls it. This way, the customer doesn’t need to allow a dedicated incoming connection in his firewall.

: Version 2.0 features an intuitive GUI, helping users to create, modify and validate/test configurations. Our Tracker 2.0 also integrates easily to GitHub, Jira, and other supported bug tracking tools without additional configuration: all you need are your log-in credentials and projects identifiers.

The development doesn’t stop there. YesWeHack will shortly announce a bi-directional capability, enabling teams to collaborate seamlessly with one another on vulnerability reports, comments, feedback and other insights.

Find out how this latest release of YesWeHack’s plug-and-play bug tracking integration solution can help you ship innovative software faster 

Please visit our Changelog for all feature updates

Want to know more about our vulnerability management integration solutions? Get in touch with our team

Founded in 2013, YesWeHack is a Global Bug Bounty & 


YesWeHack offers companies an innovative approach to cybersecurity with Bug Bounty (pay-per-vulnerability discovered), connecting tens of thousands cybersecurity experts (ethical hackers) across 170 countries with organizations to secure their exposed scopes and reporting vulnerabilities in their websites, mobile apps, infrastructure and connected devices.YesWeHack runs private (invitation based only) programs and public programs for hundreds of organizations worldwide in compliance with the strictest European regulations.

In addition to the Bug Bounty platform, YesWeHack also offers: support in creating a 

, a learning platform for ethical hackers called 

 and a training platform for educational institutions, 

Ship Innovative Software Faster with YesWeHack Tracker 2.0

 (IDOR) are still in the Top 10 OWASP in 2021 and there’s a good reason for that: IDOR vulnerabilities are common in web applications, especially in APIs. How do we find these vulnerabilities? How can you optimize your IDOR discovery time? How can you go further? Let’s see together!

First step, let me introduce you to PwnFox

 have been developed by our tech ambassador @Bitk.

 to hold multiple unique sessions in the same browser window.
(

TL;DR: no more need to have 3 Firefox instances opened in private browsing mode

For an optimal use of PwnFox, you’ll need two things:

 to proxy your web browser with Burp Suite and dispose of up to 8 different containers

 : to add beautifully highlight your requests in burp, and allow you to easily match them with your different containers sessions by colors (in HTTP History for example)

On the Firefox side, once the plugin is installed, you can open a new tab and each tab will be colored to easily recognize your different hunting perimeter segments.

On Burp Suite, once the extension is installed (

), you will automatically be able to match your different requests on the “

” tab. Each requests are grouped and highlighted using the same color as your corresponding containers tabs on Firefox.

From that point, you may already see this plugin’s goal and how it can be used to find 

On your target, open two and more PwnFox tabs with different users and roles in each containers. For example, one with “admin” role and two with a “member” role. Now carefully explore your target web app, try to enumerate the APIs endpoints you can discover for each role, and every method available: PATCH, GET, POST, PUT, DELETE…
Every requests you will make will be highlighted and colored in your [

, you can select a line (ex: green for the “admin” role) and send it to Burp’s 

. Then select another line, ( ex: red for “member” role) and send it also to the 

‘s authentication cookies and see what happens! Maybe luck will be with you!

Next  step, install and discover Autorize

is an automatic authorization enforcement detection extension for Burp Suite. It was written in Python by 

, an application security expert. Autorize was designed to help security testers to perform automatic authorization testing.

To install Autorize, open Burp Suite and go on the tab 

Once the plugin is installed, you should see a new tab in Burp Suite, called “Autorize”.

Left part: All requests which have been tested by Autorize will be displayed in this part;

Right part: The global configuration of the plugin (headers for cookie, filters, table, enforcement…) and also the request & response viewer;

 or URLs that are not inside your scope, we recommend to start by adding a new Interception Filters. Go on 

Interception Filters > Select “Scope items only: (Content is not required)

Once this is done, open your web browser and create two accounts on your target scope (

 session (this may also be a header string like JWT token) and paste the value to the configuration inside the Autorize tab.

You’re now ready to test for IDORs from your 

 to start. Autorize can do many things for you, but you also need to work for him 🙂

 account session, try as many things you can on your target: add new data, tamper with your data, delete them, test all the features, the goal here is to accumulate the maximum number of queries inside the Autorize tab.

What’s going on? It’s like a Christmas tree

To clearly identify potentials IDORs, Autorize use colors highlighting in 

Be careful, Autorize displaying many red highlight requests does not mean that all endpoints are systematically vulnerable. There may be false positives, it’s up to you to double-check the output.

Now compare the responses size between each query: if it’s the same, go deeper!:

: is also the same request as our victim account but without cookies session (to test if the endpoint is vulnerable to 

Click on the interesting request and check the 

 correspond to the server response to our 

 cookies. As we can see, many information are displayed and a vulnerability of the IDOR type seems to exist.

 correspond to the server response to our original 

 request. It’s useful to compare the response between our two accounts and to detect false positive.

 is the server response to the request but without any auth cookie.

By using these two plugins, you should have a better chance of finding 

 vulnerabilities. Moreover, it allows you to automate some queries and focus on the interesting ones.

We hope you liked this article, feel free to share with us your best Burp plugins and see you soon for the 

PimpMyBurp #1 – PwnFox + Autorize: The perfect combo to find IDOR

A year for resilience, 2020 has also been a year for the community. As an organisation, 

 has demonstrated once again its remarkable agility. As a community, YesWeHack continued to grow bigger and stronger.

Despite the challenges, we are proud to have seized many opportunities. 2020 ended with 20,000 ethical hackers hailing from all over the world. And 2021 starts with ever more organisations trusting our community. Startups, SMEs, multinationals across all industries trust YesWeHack to help their business grow safely. Crowdsourced security has so become the new cybersecurity standard.

The technology we build enables the community to instil the atmosphere of trust our customers seek. That ability to adapt quickly brings unrivalled value to all parties involved; Bug Bounty has entered the agile software development lifecycle. Vulnerabilities surface and are fixed faster; deliveries are more fluid. As organisations embrace digital transformation, crowdsourced security is the most capable of ensuring such hybrid environments’ security.

. Through the conversations we have with both ethical hackers and customers, we also learn how trust meets excellence. Programs get the high-quality management they deserve, transforming security into a real business enabler. As organisations and ethical hackers cosy up collaborating, a significant number of bugs are surfaced as valid vulnerabilities. With a lively 2021 ahead, digital resilience is here to stay.

Building an ever more robust community and technology to support our customers’ growth remains our priority. We embrace technological evolution with all its wits—evermore interconnected systems and an increasingly digitally-enhanced supply chain challenge every organisation. No matter the industry, the attack surface grows knotty.

For the most part, the top vulnerability types had stayed consistent over the years. Yet, 2020 has brought a sweeping digital transformation. With it, a steadily growing trend towards vulnerabilities originating from implementation or design flaws. That trend will only intensify as development frameworks are continuously hardened.

With the YesWeHack community’s support, the addition of innovative yet inescapably complex tools does not become an uphill security battle. Yes, Internet-exposed services will always be there. Yes, cyber-attacks are becoming more pervasive amid a growing attack surface. Our technology gives our customers the power to drive the business pace and harmony in today’s DevSecOps environments. Whatever the technical challenge, ethical hackers will hold off the threats.

Reflecting on what is to come in 2021 also lands us on our values. Technology pervades every part of our lives. Security does not exist in a vacuum. As we tango with new and subtle threats, maintaining trust and transparency in the technology is paramount. A resilient and robust community that walks the talk guarantees that democratic values prevail.

Vulnerability non-proliferation remains at the centre of the values that make YesWeHack what it is today: a team and a community committed to safer cyberspace for all. In 2021, it is ever more important to collaborate with ethical hackers and policy-makers to continue promoting socially-conscious security practices.

Ethical hackers play a central role in the future we build. Governments need to rely on them more, to ensure the security and integrity of public services and fundamental democratic processes alike. To match the massive use of connected devices, the massive adoption of vulnerability disclosure policies must follow.

2020 has been a year for the books. In 2021, we will continue building–robust community, robust technology and robust policies.

Resilience through community: Looking forward to 2021

Why did you launch a Bug Bounty program? 

As Europe’s leading publisher of cybersecurity solutions, we need to have peerless security ourselves. The strong cybersecurity practices we endorse to our customers must be reflected in our own operations. In the past, we relied on traditional methodologies, such as security audits, penetration testing and scans. However, these solutions were not only expensive, they were also only carried out periodically. About two years ago, we took the decision to move to continuous monitoring, both to improve the security of our applications and reassure our customers. 

was the natural choice to underpin this modern cybersecurity strategy.

During client engagements, we are often asked searching questions about our security guarantees. After all, we host sensitive information and our customers want to be certain that their data will not be compromised. We present all of our security processes and methodologies to clients, including non-regression testing, DevOps and others. The problem is that these practises are no longer sufficient to reassure customers. However, the conversation changes completely when we talk to clients about our Bug Bounty program. They are immediately reassured by the fact experts are continuously testing our applications. 

Bug Bounty is a real differentiating asset, and it’s a sales argument we promote every time.

What makes Bug Bounty so special? What does it offer over traditional approaches to cybersecurity?

 is the continuous applications security.

 Previously, we worked with an audit firm on a quarterly basis, and now we have ‘hunters’ tracking down potential vulnerabilities throughout the year.

There is also the follow-up aspect. If we perform a penetration testing,

 for example, and want the auditor to check the correction once a bug has been fixed, we have to undertake a new audit. With Bug Bounty, it’s much more flexible. When a hunter raises a vulnerability, we can exchange directly with that person, correct it and ask them to check it. We then pay the hunter once the correction has been confirmed. With a traditional auditor, there is no verification: it’s up to the developer to make sure that he or she has implemented the patch properly. Every time you deal with an auditor it can also feel like part of a contractual exchange.

Then, of course, there is the return on investment

. When you perform a penetration testing, you have to pay even if no vulnerability is identified. With Bug Bounty, when a product is added to the program, dozens of hunters – potentially many more in a public program – perform the test. If no vulnerability is found, there’s nothing to pay. It’s very rare to find a solution offering near-optimal security for such a low cost.This really resonates with senior management too. They can see directly that a Bug Bounty program costs much less than a penetration testing or an audit.

Bug Bounty also offers significant value in terms of efficiency and diversity of skills. 

When you carry out penetration testing for the first time, you typically don’t have trusted partners you can turn to, so you choose an auditing or consulting firm at random. It’s a bit like a lottery: the tests might be carried out by people who are familiar with the theory, but less familiar with the practice. They’ll run scans to see the installed versions, which will bring up all the vulnerabilities associated with these versions, but there will be no proof of exploitability. For example, these consultants may comment, “You have PHP 7.0 installed. We know there are all these vulnerabilities online, we’ll put them in the report and let you deal with it”.

From our experience with audit firms, we just end up with a report with no evidence of exploitable vulnerabilities. All too often, an auditor may fall short of expectations, but the final bill is the same.With Bug Bounty it’s different. If we come across hunters with a little less experience, it’s not a big deal, because there are more than a 

working on the project who will surface potential vulnerabilities. In addition, the reports written by the Bug Bounty researchers detail precisely the vulnerabilities found – and sometimes even how to fix them. 

That’s a key point compared to traditional approaches: Bug Bounty offers a very wide range of skills to ensure that applications are as secure as possible.

Has penetration testing been scaled back since introducing Bug Bounty?

Yes, we’re only doing one or two a year now. 

Honestly, penetration testing doesn’t interest us much anymore since we launched our Bug Bounty program.

One of the other attractions of Bug Bounty is the fact we can increase the price of the bounties over time if we choose, either to attract more hunters or draw in more qualified hunters. We can also vary different types of campaigns by introducing new scopes. Currently, for instance, we are in ‘grey box mode’, an authenticated mode. Last month however, we opened the ‘black box’ mode with more attractive pricing for hunters.

From time to time, we also do special campaigns. Not too often though, because it requires resources to follow-up with the reports.

How has bug bounty influenced your development team? Are they more aware of hacking, for example? Has it broadened their skill set?

Bug Bounty has really raised awareness among our developers

. The concept of ‘hacking’ is now a fun part of their role. It’s a bit ‘dark’ and certainly interesting for our technical teams. Developers learn how to be the ‘bad guys’, for example, and how to retrieve information they shouldn’t have access to. This aspect is really interesting for the development teams, raising their awareness of security and their engagement with it.

Most developers have already heard about various security breaches – XSS vulnerabilities, SQL injections – but don’t have the opportunity to practice. When they have to fix a vulnerability and have access to a well detailed POC done by a researcher, they have a real use case in front of them, and that makes all the difference.

all the teams that have been able to correct vulnerabilities have improved their skills and integrated good development practices.

How does Bug Bounty fit into your agile strategy?

. Before, we used to receive a PDF report with a list of vulnerabilities to fix. Now, we receive reports progressively, which makes the workload much easier for our teams to absorb.

In conclusion, what advice would you offer to your peers?

I would advise any organisation to implement a Bug Bounty program. For me, it is a mandatory step to achieving continuous, cost-effective application security. In my opinion, Bug Bounty should be implemented in every company that develops software. It’s a necessary step if you want to deliver both a secure and scalable software solution.

Interested in a demo or want to know how to implement a Bug Bounty program in your organisation?Get in touch with our team

How cybersecurity players gain customer trust with Bug Bounty

 was on finding a valid SQL injection to bypass inputs filter protection

that forbids the use of common SQL comments.

We are glad to announce the #6 DOJO Challenge winners list.

 feeds to be notified of the upcoming challenges.

Read on to find the best write-up as well as the challenge author’s recommendations.

You had two input fields you can inject, but can’t use any comments to escape the query. Also, your inputs are stored in a separate table from where the displayed output is fetched.

We asked you to produce a qualified write-up report explaining the logic allowing such exploitation. This write-up serves two purposes:

Determine the contestant ability to properly describe a vulnerability and its vectors inside a professionally redacted report. This capacity gives us invaluable hints on your own, unique, talent as a bug hunter.

‘sReport was particularly efficient in detailing the exploitation logic, we thus decided to reproduce it in here.
We only publish the best report, however we received an outstanding variety of payload, each one of it’s own genius and encodings tricks.
That was much fun to read.
Thank you!

A SQL injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.


We have some SQL code that is taking user inputs. Theses inputs are not properly escaped. Indeed, the characters “‘” is not escaped, which enable an attacker to break the SQL Code.
Usually, an attacker use multiple statements or comments to easily customize the query without worrying about the application too much. But here some characters generally used in this purpose are blacklisted like /* — ; #

The challenge is to extract the admin password from the database. One solution would be to use a Union Select query. This query will query the users database (known from previous challenges) and extract the password. A code similar code would do it:

But here, our code is inserted into two statements. The “Insert” statement need a result with two columns and the “Select” statement needs only one column. Yes, we have spotted the major difficulty of this challenge.
The question is, how to inject a Union Select that could returned one column in one case and two in the other case from the same source code?
There is no easy answer (at least that i know).

Then by analysing the code, we can see that we have two inputs. Moreover, they are used in a different order…
By playing a little with these inputs, we can get an interesing result. Some text could be interpreted as a string in one statement and as SQL in the other statement… Great, we are close to a solution!

Then we need to be able to generate a valid SQL query. We need to customize it a little to get a working SQL query.
We have 3 requirements:

do not modify too much the last statement, but we want to test that we can execute SQL in it

In order to concat injected string, we can use “||”.

We will also use the function char() to test that we can properly execute SQL.

Now, we can customize the request with a Union Select request:

user the SQL operator IN to finish the request with ‘); properly

to avoid restriction from this operator add a 1=1 Or condition

Then remember the initial goal of the challenge: extract admin password. The request need some tunning:

If you try to do a username=’admin’, it will break the Insert statement. It is better to avoid ‘. We can generate the admin string by concatenating char(xx)

————– END OF smidthjohn886 REPORT ——————

. He also created the DOJO and this challenge.

For this challenge we received a lot of different payloads, here is two other solutions that use function call to get around the lack of comment. These are unintended solution, +1 for the imagination.

DOJO CHALLENGE #6 Winners!

 was about finding a valid XSS payload. The first five challenge solves and the five best write-up reports were rewarded with a nifty goodies pack.

 We had a great variety of working payloads, demonstrating the vibrant creativity of our community. Thank you all for playing with us!

 geared towards learning bug exploitation the fun and visual way.

The DOJO is three things in one: a learning tool, training platform and a playground.

The DOJO is the arena where the third challenge took place (see the 

We are glad to announce the #3 DOJO Challenge winners list. Everyone will receive a goodies pack.

Other contestants will be able to re-enter the race on the next challenge! Subscribe to our 

 feeds for the forthcoming challenge announcements.

 by exploiting two heavily filtered parameters. The execution context was also inside a conditional block that had to be bypassed somehow.

We also asked you to produce a qualified write-up report explaining the logic allowing such exploitation. This write-up serves two purposes:

We publish here the best write-up report for this session with the permission of its author, 

The used vector also was not the simplest, but nonetheless unique across all the reports.

/—– SENSEI SAPIC’s REPORT ———————————————————–/

Cross-site scripting (XSS) is a vulnerability that allows an attacker to run javascript in a victim browser context. The attacker can thus leverage it to take action on behalf of the victim. Most of the time, an XSS allows to steal a session and to take over an account.

As per the description of the challenge, the goal is to trigger an XSS in the DOJO Playground using two parameters: 

Here is the source code of the challenge:

Let’s have a look at the code… We have two inputs with the following constraints:

The code also has other interesting elements:

Thus, we will not be able to escape the code logic from the 

 is working and make the rest of the code interpreted as template literals.

We will use the template literals placeholder to trigger our XSS. As per the documentation:

 : is the placeholder to be interpreted as javascript

 : is the requested payload to validate the challenge

 : to comment the ” coming present in the code

Thanks for the challenge!! It’s the first challenge I am doing with YesWeHack and it’s a good experience. The DOJO Playground interface makes it fun to play with and it is very good for learning. Thanks, 

/—– END of SAPIC’s REPORT ———————————————————–/

 is the Technical Ambassador at Yes We Hack. He also created the DOJO and this challenge.

Using backticks was not the only possible solution. You could use comments as well with $age = /* and $name starting with */.

Another solution would be to make $age = ", as this would escape the endline character and make a multiline string ending just where our $name start.

The YesWeHack Blog

Sound policy for a vulnerable-by-default cyberspace

Ship Innovative Software Faster with YesWeHack Tracker 2.0

PimpMyBurp #1 – PwnFox + Autorize: The perfect combo to find IDOR

Sound policy for a vulnerable-by-default cyberspace

Resilience through community: Looking forward to 2021

How cybersecurity players gain customer trust with Bug Bounty

DOJO CHALLENGE #6 Winners!

Resilience through community: Looking forward to 2021

DOJO CHALLENGE #3 Winners!

Vulnerability Disclosure Policy through the eyes of a bug hunter

DOJO CHALLENGE #2 Winners!

DOJO CHALLENGE #3 Winners!

Don't wait for threats to strike

Produits

Chercheurs

Ressources

A propos

Suivez-nous