SQL injection and XSS: what white hat hackers know about trusting user input
A primer on SQL injection and cross site scripting, and how to handle user input in software development. Software developers have a lot on their…
Category: Mix
Introducing Unified HackerOne Scope Management with Burp Suite Support
This post will start with the basics of defining scope and how ethical hackers and testers use it in their testing workflow. If you’re already…
Crowdsource hacker discovers CVE-2021-43798 0day in Grafana
Short Summary of CVE-2021-43798: On December 2, Grafana released an emergency security patch for critical vulnerability CVE-2021-43798, after proof-of-concept code to exploit the issue was…
OpenAI’s Purpose is to Build AGI, and What That Means
Created/Updated: January 23, 2023 Sam Altman, the CEO of OpenAI, has said multiple times that, He says it in this video as well. > We’re…
Hackers are Googling your plain text passwords: preventing sensitive data exposure
Why sensitive data controls need to be established long before you think you need them, as demonstrated by Google dorking. Last week, I wrote about the…
Rise of Internet Bug Bounty
Are you a veteran hacker, someone who loves code review, or looking to get your first CVE? Then, I have something to share with you.…
Press information: Detectify sees significant increase in detected vulnerabilities powered by its Crowdsource community
STOCKHOLM, January 27, 2022. Detectify, the SaaS security company powered by ethical hackers, closed 2021 with significant corporate momentum propelled by its Crowdsource community. In 2021, Detectify…
Your Experience is Your Creativity
Creativity is something you let out, not let in Created/Updated: January 31, 2023 This is member content. Thank you for being a subscriber. Creativity is…
How users and applications stay safe on the Internet: it’s proxy servers all the way down
An overview of how proxy servers form the basis of online anonymity, and how their use in various forms helps both users and web applications.…
Prompt Injection Attacks and Mitigations · rez0
I recently participated as a panelist on a HackerOne press panel where there was a lot of discussion about AI and security. In preparation, I…
Use Hackerone’s Enhanced Pentest as a Service to Streamline Security Testing
New capabilities improve pentesting to increase attack resistance The enhanced features drive robust security testing practices with the ability to launch, test, identify, retest, and…
How to interpret your Detectify score
Detectify is aiming to make security understandable and easy to work with. That is why we visualize your security status in several ways in the…