What You Reap, Is What You Sow by Chris Roberts
Explore cybersecurity challenges, industry failures, and potential solutions in an evolving technological landscape. Gain insights on improving security practices and addressing emerging threats.
Behind the Curtain - Safe Harbor and Department of Defense
Explore legal protections, risks, and trends in vulnerability disclosure with DoD experts. Learn about safe harbor policies, submission processes, and the evolving landscape of bug bounty programs.
From CTF to CVE by Joe Gray
Explore the journey from Capture The Flag challenges to real-world vulnerability discovery, emphasizing skill application, persistence, and responsible disclosure in cybersecurity research.
What's in My Hacking Tool Box? by Richard Rushing
Explore a seasoned hacker's toolkit and methodology for penetration testing, covering various domains including malware analysis, mobile app exploitation, and API security.
Bad API, HAPI Hackers!
Explore API hacking methodology, from information gathering to privilege escalation. Learn techniques for testing vulnerabilities, automating processes, and uncovering critical security flaws in web applications.
API Security 101 by Sadako
Explore API security fundamentals, common vulnerabilities, and real-world examples. Learn testing methodologies, fuzzing techniques, and gain insights from notable bug discoveries in this beginner-friendly introduction.
Finding Bugs with Binary Ninja by Jordan Wiens
Explore bug-finding plugins for Binary Ninja and learn techniques to extend them for discovering various bug classes in this informative demonstration.
Social Engineering 101 by Matteo Cagnazzo
Discover techniques for gathering company information through OSINT and social engineering. Learn how non-technical methods can complement technical security assessments in bug hunting.
What You Missed During Black Hat and DEFCON - Security Conference Highlights
Explore key highlights from Black Hat and DEFCON, including car hacking, Android security, policy changes, and malware analysis, as presented by Bugcrowd's VP of Operations.
Critical Vulnerabilities and Bug Bounty Programs
Explore critical vulnerabilities uncovered through bug bounty programs, their impact, and strategies for effective vulnerability management and disclosure in cybersecurity.
Hacking with Burp Suite for Bug Bounties - Tutorial 1
Learn essential Burp Suite techniques for bug bounty hunting, including setup and basic functionality, to enhance your web application security testing skills.
Barracuda Bug Bounty Program Evolution - From Inception to Bugcrowd Platform
Explore Barracuda's bug bounty program evolution, from its 2010 inception to current Bugcrowd platform, covering impact, metrics, and rewards for security researchers.
5 Tips for a Successful Bug Bounty Program
Discover key strategies for implementing an effective bug bounty program, including common pitfalls to avoid and expert insights for maximizing benefits and security outcomes.
How the Crowd Outperforms Traditional Security Testing
Explore how crowdsourced security testing outperforms traditional methods, with insights on implementation, benefits, and real-world examples from successful bug bounty programs.
The Art and Value of Bug Bounties
Explore cybersecurity trends, bug bounty myths, and the future of ethical hacking with experts Keren Elazari and Casey Ellis in this informative webinar on the value of crowdsourced security.
Finding Bugs with Burp Plugins and Bug Bounty 101
Learn to create automated testing plugins for Burp and explore bug bounty programs. Gain insights on finding vulnerabilities, tips for success, and valuable resources for cybersecurity enthusiasts.
What Is Bug Bounty?
Explore bug bounty basics, including potential earnings, required skills, and benefits for companies. Learn how to get started and what to expect in this comprehensive introduction.
XML External Entity Injection
Learn to identify, exploit, and mitigate XML External Entity (XXE) vulnerabilities. Gain practical skills to enhance application security and protect against data disclosure and system impacts.
OWASP iGoat - Learning iOS App Penetration Testing & Defense
Explore iOS app hacking and penetration testing techniques using OWASP iGoat, a powerful tool for understanding and improving mobile app security.
Fuzzing XSS Sanitizers for Fun and Profit - Tom Anthony
Explore XSS sanitizer fuzzing techniques with Tom Anthony, from his hacking past to current cybersecurity insights. Learn about innovative approaches to discovering vulnerabilities in web applications.
Bugcrowd University - Broken Access Control Testing
Learn white hat hacking techniques for identifying and exploiting broken access control vulnerabilities, including IDOR, path traversal, and logic flaws, to enhance your bug bounty hunting skills.