1 min read
Related Articles
All Mix â
Hacktivity Disclosure for Private Programs
Disclosure is in the DNA of HackerOne. We call it Hacktivity and have supported public disclosure workflows of vulnerability reports since the beginning. Default to…
limited freemarker ssti to arbitrary liql query and manage lithium cms | by mert tasci | Mar, 2023
we faced (w/ @celalerdik) an interesting ssti vulnerability on a bugcrowdâs program. we could show the traditional 49â number when trying the â${7*7}â command, also…
a first step to a more centralized approach
Table of Contents For company admins  For program admins & editors   Migration of existing domains Weâre pleased to share a significant new change to our…
Finding IDORs with CODE REVIEWS!
Finding IDORs with CODE REVIEWS! Source link
Calling All âBureaucracy Hackersâ | HackerOne
Lisa Wiswell, a HackerOne advisor and a principal at GRIMM cybersecurity firm, thinks the government needs more help from hackers. Not just with hacking or…
ChiBrrCon 2020: Don’t Cross Me! Same Origin Policy and all the “cross” vulns
ChiBrrCon 2020: Don’t Cross Me! Same Origin Policy and all the “cross” vulns Source link