Finding Bugs With Nuclei: Templates, Resources, and Tools
Nuclei scans stuff for vulnerabilities. What does it scan? Modern applications, infrastructure, cloud platforms, and networks. How does it work? Templates. Lots of templates. These…
Category: Mix
Fundamentals of GraphQL-specific attacks – API Security
GraphQL vs REST APIs Developers are constantly exploring new technologies that can improve the performance, flexibility, and usability of applications. GraphQL is one such technology that…
Hack My Career: Harley Kimball’s Journey to DEFCON
In this interview, we explore Harley’s experience at DEFCON, the world’s largest hacker convention, where he took his skills to new heights. His story goes…
The Rise of Bug Bounty Programs in S-1 Filings: A New Standard in Corporate Security
Learn more about bug bounty programs and how they work > The Growing Trend At HackerOne, we’ve observed a notable increase in companies mentioning their…
Burp Suite Performance Improvements | Blog
Daniel Allen | 11 September 2024 at 06:53 UTC Performance is a critical factor in the usability and efficiency of any software, and Burp Suite…
Announcing Hai Plays: Personalize Your Playbook for Spot-On Security Advice
Take Precision to the Next Level—Beyond Basic AI Efficiency and precision are critical in every operation. However, many security teams face the challenge of repeatedly…
Capital One Launches Public Bug Bounty Program with HackerOne
What’s New? We at Capital One strongly believe in the importance of security, and part of our mission is to protect our customers and their…
From Prospect to Partner: Jon Stone Shares HackerOne Career Story
At HackerOne, SDRs focus on prospecting, qualifying leads, and setting up meetings for AEs, while developing these skills to take on more responsibilities, including closing deals…
My Current Favorite AI Prompt
.bh__table, .bh__table_header, .bh__table_cell { border: 1px solid #C0C0C0; } .bh__table_cell { padding: 5px; background-color: #FFFFFF; } .bh__table_cell p { color: #2D2D2D; font-family: ‘Helvetica’,Arial,sans-serif !important; overflow-wrap:…
Hacking misconfigured AWS S3 buckets: A complete guide
AWS S3 (Simple Storage Service) buckets are a popular storage service used by software companies and organizations to store public as well as sensitive data.…
Quantifying the Value of Bug Bounty Programs: ROI, ROM, or Both?
HackerOne customers consistently factor in cost savings when measuring the success of their security engagements, with 59% valuing the estimated savings of reputational or customer-related incidents…
Crushing FUD: Embracing Ethical Hackers to Strengthen Cybersecurity
What is FUD? Fear, Uncertainty, and Doubt (FUD), are central blockers to high-efficacy security programs by creating a climate of fear and hesitation, which impedes…