Live Hacking Events | 2019 Recap and the Road Ahead
Since our first event in Las Vegas in 2016, we have hosted 20 events in 12 different cities with 14 different customers. As of our final event…
Category: Mix
Detectify team’s 10 favourite security books
November 30 is Computer Security Day, a day dedicated to security awareness and education. To celebrate, we have put together a list of our team’s…
Attack Types in Web Fuzzing
Fuzzing은 어플리케이션을 테스트하고 보안 취약점을 찾아내기 위해서 가장 일반적으로 사용하는 기술입니다. 보통 Burpsuite의 Intruder, Turbo Intruder 또는 ZAP의 Fuzz, Caido의 Automate와 같이 Proxy 도구에서 제공하는…
My Career Just Got Hacked: Rana Robillard Joins HackerOne
My career just got hacked.. and I couldn’t be more excited about it. Turns out, getting your career hacked* can be exactly what you need…
CAPTCHA does not prevent cross-site request forgery (CSRF)
In our dialogues with customers, we often come across cross-site request forgery (CSRF) findings marked as False Positives due to having CAPTCHA implemented. There is a…
Live hacking the U.S. Air Force, UK Ministry of Defence and Verizon Media in Los Angeles at h1-213
On November 6th, over 60 hackers descended on the City of Angels for the final HackerOne flagship live hacking event of 2019, h1-213. For the…
Six years of the GitHub Security Bug Bounty program
This guest blog post was authored by Brian Anglin, Application Security Engineer at GitHub and originally published on the GitHub company blog. Last month GitHub…
Hack for Good: Easily Donate Bounties to WHO’s COVID-19 Response Fund
The community has come together in some amazing ways to support COVID-19 relief efforts from Marc Rogers’ CTI League, the US Digital Response group helping…
ACME TLS-SNI-01 shared hosting exploit using Let’s Encrypt
On Tuesday, January 9, Detectify’s security advisor Frans Rosén discovered and reported a security issue in in TLS-SNI-01 validation in Let’s Encrypt. Exploiting the issue…
Live Hacking Goes Virtual | HackerOne
At a time when security must be managed remotely, HackerOne and Verizon Media called on the naturally remote and global community of skilled hackers and…
GDPR security from an ethical hacker’s perspective
Discussions about the GDPR (General Data Protection Regulation) often touch upon security, a topic that few people know as well as ethical hackers. What can…
Universal Business Components (UBC) – Daniel Miessler
Seems like everyone, including me, is talking about how AI is going to take over everything. Cool, but what does that mean exactly? And how…