The Bug Bounty Hunter

In our latest blog post, we introduce coverage-guided fuzzing with a brief description of fundamentals and a demonstration of how modifying program instrumentation can be used to more easily track down the source of vulnerabilities and identify interesting fuzzing paths.

How to achieve a working remote code execution exploit in an embedded phone without any previous access.

On April 4-5, YesWeHack had the absolute pleasure of hosting the second edition of Hack Me I’m Famous with no other than the prestigious luxury brand Louis Vuitton. Held at Louis Vuitton's Parisian headquarters, the live hacking event brought together forty of Europe's most skilled hackers for an exclusive two-day session dedicated to uncovering vulnerabilities in the luxury group's information systems. The final leaderboard is available here:

#BugBounty #LiveBugBounty #LiveHackingEvent #LHE #HMIF2 #EthicalHacking #Cybersecurity

We're excited to tell you about Nuclei Templates release v9.8.5! This new version includes newly added AWS cloud review templates. In this blog post, we'll discuss automating cloud misconfiguration review, creating custom AWS checks, and sharing results on the PDCP Cloud for review. The AWS Cloud Security Configuration

Hi guys,

This week sees the launch of our very first virtual event for the cybersecurity community. Hardly Strictly Security begins on April 25th at 8am PT (check how this works out in your own time zone here), and runs for the entire day, packed with thought-provoking and insightful talks from some

From First Rejection to Monthly Top

After detailing authentication issues with VMWare’s Airwatch and Ivanti’s MobileIron, I began to search other popular Mobile Device Management (MDM) tools for similar logic flaws. One of my primary targets for this effort was the BlackBerry MDM. Black who, you say? I know their solution set is not as popular as it once was but the MDM application is alive and well - BlackBerry MDM. Thinking back, I remember the numerous hours sifting through emails on my small BB device - wishing I had an Android instead. Well, today I am releasing research I had conducted on Android targeting the BlackBerry UEM client - I hope you enjoy it.

A collection of Server-Side Prototype Pollution gadgets and exploits - KTH-LangSec/server-side-prototype-pollution