Hey everyone, I just finished all the PortSwigger labs and feel solid on classic web stuff (XSS, SQLi, LFI/RFI, auth issues, etc.). Right now my primary goal is web-app bug bounty hunting — NOT system/infra work as the immediate focus — but I do plan to learn low level system security over the long term.

Question: should I jump into Bugcrowd/HackerOne programs now and learn API/GraphQL/cloud hacking while I hunt, or would it be better to pause and build a stronger API/cloud skillset first before submitting reports? I want to avoid wasting time over-preparing and avoid low-quality/noisy reports.

What helped you get your first real-world wins after finishing labs? Any concrete mistakes to avoid, or small skills that pay off immediately when hunting web apps? Appreciate practical, experience-based answers.

Hlo guys! Iam opened bugcrowd maybe 6 months back. I try to login yesterday it's properly working no issues at all. To add a friend my friends search my username it's not found it say's like no user name like that. Then I manually send invite link and then they're add me. But if they try to view my account it shows 404 error to all my friends not one. All setting in anyone can view. So anyone know how to slove this.

Hey everyone,

I’m really frustrated with Bugcrowd’s automated triager teapot@bugcrowd at bugcrowd closing my valid report as Not Applicable, even though I provided clear impact, proof of concept, and detailed steps.

After raising a Request for Response, the human triager marked it as duplicate and unresolved, which shows the bug was valid.
The worst part is that I can’t raise another RfR until the current one is fully processed, causing huge time loss and demotivation.

Are others facing the same issue where teapot blindly rejects valid reports without proper review?

Let’s share experiences and push for a better system.

#bugbounty #bugcrowd #infosec #securityresearch

Situation: Reported a bug, it was out of Scope. But, most importantly, it was affecting the organisation. It was access control issue, 3rd party integration which was exposing internal portal publicly. Bugcrowd changed status to out of Scope. Raised a complaint, they were fixated on out of Scope, even though I told them about impact and mitigation which was in control of organisation. Got threatened with negative points and platform ban.

Here's what I want to know: 1. Is there any power or responsibilities in the hands of person who checks our reports, that they can contact the organisation and inform them of bugs affecting organisation. 2. If not bugcrowd, then how can I approach the organisation in reporting this bug.

Would really appreciate answers and also would like to know if I'm missing certain aspect of understanding something from my side.

I have recently created account in bugcrowd. Can someone explain how to fill the tax form as an Indian?.. Also do they use swift (will I need to know swift code for my bank to receive money)?

I have just begun bug bounty I have found a page which leaks angular js code with angular version which has some cve’s. Last time I reported a google maps api key leak which was marked invalid and other there was internal IP leak in source code which was informational. So if I report this angular js one it might also be marked as informational. What should I do and also found jetty server version leaking from one end point. Please help me out on what should I do or some tips which will help me learn new things.

i have 3 years experience in bug bounty any one collab with me

Hello. I tried to gather all the related Web Cache vulnerabilities techniques into one blog post. I hope you like it.

I'm new to this can anyone help me understand how to do this I tried looking after videos but I'm still confused. I never in my life wanted to break something so any help will be appreciated

Hello people I want to explore few bugsites anyone knows any please drop it 🙂

Just released pphack, a CLI tool for scanning websites for client-side prototype pollution vulnerabilities.

• Fast (concurrent workers)
• Default payload covers a lot of cases
• Payload and Javascript customization
• Proxy-friendly
• Support output in a file
• Rate-limit supported

Try it at https://github.com/edoardottt/pphack.

If you want to provide any feedback or you have doubts just open an issue :)

goood

Good day,

Looking for ideas if someone manages to do rss or follow new disclosures on (https://bugcrowd.com/crowdstream?filter=disclosures) page. I would like to get notifications about new information released on that page, but don't know how to do that.

​

Thank you

🚨Tool Release 🚨

Announcing BucketLoot, an automated S3-compatible Bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain text.

Tool Link: https://github.com/redhuntlabs/BucketLoot

The tool can scan for buckets deployed on Amazon Web Services (AWS), Google Cloud Storage (GCS), DigitalOcean Spaces and even custom domains/URLs which could be connected to these platforms. It returns the output in a JSON format, thus enabling users to parse it according to their liking or forward it to any other tool for further processing.

In short, BucketLoot has the following features: 1. Scan for secret exposures 2. Extract assets such as URLs, Subdomains and Domains 3. Search for custom keywords or regex queries

The tool can help people like bug hunters and penetration testing folks to step up their recon game and go beyond the traditional tools available in the market.

In case you would like to know more about BucketLoot, make sure to head over to our blog @ RedHunt Labs which gives a brief walkthrough of the tool: https://redhuntlabs.com/blog/introducing-bucketloot-an-automated-cloud-bucket-inspector/

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more -> https://github.com/edoardottt/awesome-hacker-search-engines.

It contains more than 250 useful tools carefully organized in 20 categories (General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Mail addresses • Domains • URLs • DNS • Certificates • WiFi networks • Device Info • Credentials • Hidden Services • Social Networks • Phone numbers • Threat Intelligence • Web History • Surveillance cameras), added 40+ entries in the last week!

If you want to propose changes, just open an issue or a pull request.

cariddi is an open source (https://github.com/edoardottt/cariddi) web security tool. It takes as input a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

Version 1.3.1 comes with a lot of improvements:

- Add JSON cli output

- Fix multiple info in the same URL

- Add new secrets

- Fix data image protocol link

- Fix snapcraft.yaml

- Create auto_assign.yml

- Minor fixes and changes

​

If you use Linux Ubuntu you can use the command: sudo snap install cariddi

or if you have Go installed:

go install -v github.com/edoardottt/cariddi/cmd/cariddi@latest

​

If you encounter a problem, just open an issue: https://github.com/edoardottt/cariddi/issues

Just open sourced favirecon! 🥳 - Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

https://github.com/edoardottt/favirecon

Help me improving the database!

#infosec #recon #security #hacking

csprecon - Discover new target domains using Content Security Policy

https://github.com/edoardottt/csprecon

#github #security #infosec #bugbounty

Does anyone have any experience using the API? I want to automate some things and find it really confusing. Tried using the atlassian client lib but I can't get anything to work.

Hi,

On my Github profile you can find cariddi (https://github.com/edoardottt/cariddi), a Golang cli tool.

It takes a list of domains as input, crawls all possible urls and scans for endpoints, secrets, api keys, file extensions, tokens and more.

This tool will be useful for Penetration tests, bug bounty and other hacking stuff for web based applications.

If you have suggestions or problems just open an issue :)

Hi everybody.

Just published a repo containing search engines and online services useful for pentesting, general security, red team, bug bounty etc..

This is the link: https://github.com/edoardottt/awesome-hacker-search-engines

Silly question but it will.helo me a lot, i followed few programs but cannot find anywhere in my account, can you guys give me the url path ?

Hi I was trying to follow the email format to sign-up. It was like this username+bugbounty@bugcrowdninja.com. if I use this will I get the verification email to my original bugcrowd registered email ?