@Bugcrowd

The leading provider of crowdsourced cybersecurity solutions purpose-built to secure the digitally connected world...Unleash Ingenuity™

 San Francisco, CA
linktr.ee/bugcrowd
Joined September 2012
  • Tweets27K
  • Following6.1K
  • Followers205K
9.3KMedia
You can never go wrong with recon. 🔎 Here are some tactics you can try: 🟠 Scope company domains 🟠 Scope target company acquisitions 🟠 Enumerate ASNs 🟠 Run reverse WHOIS lookups 🟠 Enumerate subdomains 🟠 Analyze open ports 🟠 Check ad/analytics trackers 🟠 Use Shodan to find exposed assets 🟠 Google copyrights, terms of service, and privacy policies Just make sure to test only in-scope assets. ✅
3
4
24
2,081
Get a better understanding of why you should stay within scope: 👇 bugcrowd.com/blog/understand…

Understanding Scope for Higher Payouts | @Bugcrowd

Scope is one of the most important elements in a crowdsourced security program. As described here, the Bugcrowd team works closely with program owners to craft a detailed and clear brief

bugcrowd.com
1
1
531
UPCOMING EVENT: Join us on October 21 for the RSA Conference, where Alistair G, our Director of Red Teaming, will participate as a panelist in the Innovation Showcase: "Countering AI-Powered Fraud Before It Happens." Register here: bgcd.co/4yVlDG6
1
7
3,627
How does a top hacker prepare for a Live Hacking Event (LHE)? 😏 Let’s hear it from a pro:
3
11
1
154
13,322
Got rate-limited. 😩
2
7
61
9,058
“Is bug bounty really legal? 🤔” Here’s a quick clarification: 👇
1
1
45
7,223
The Nuremberg Hive Exchange agenda just dropped ⬇️ We hope to see you October 28. Reserve your spot today! luma.com/4hngxg09
2
2
11
4,747
You can now scroll X and Reddit at the same time! ⏬ If you’re interested in: ➡️ Bug bounty ➡️ Security news ➡️ or anything hacking-related Follow us here and on Reddit! 🔔 Here’s our official subreddit: 👇 reddit.com/r/Bugcrowd
1
2
25
4,482
How to discover and test API endpoints? Here are some solid tips: 👇
3
5
76
8,011
No target yet? Take your pick here: 🎯 bugcrowd.com/engagements
1,982
Hack and party!🕺
26
145
19
1,137
55,927
Are you seeing a 403 when you access this: GET /api/v2/admin/users ❌ You can try bypassing it by accessing an older API version: ➡️ GET /api/v1/admin/users ➡️ GET /api/admin/users ➡️ GET /api/V2/admin/users ➡️ GET /api/v2/admin/users with X-API-Version: 1 ➡️ GET /api/v2.0/admin/users ➡️ GET /api/beta/admin/users What else will you try? 👇
8
39
345
11,564
We are continuously reviewing the mechanics of the Bugcrowd Platform to safeguard triage capacity, uphold signal quality across all engagements, and improve the experience for everyone. Read about our latest update here: bugcrowd.com/blog/evolving-o…

Evolving our submission accuracy and throttling controls to protect triage speed | @Bugcrowd

Bugcrowd updates its submission accuracy metric and throttling rules to curb AI-generated spam and speed up triage. See how the changes affect researchers.

bugcrowd.com
11
3
3
28
7,987
Stuck on a target? Other hunters have your back.
1
1
8
5,025
Join our community on Reddit 👇 reddit.com/r/Bugcrowd/

r/Bugcrowd

Discussion about bugbounty & ethical hacking disclosure and things related to Bugcrowd.

reddit.com
2,018
Why should an organization invest in a Live Hacking Event? 🤔 We'll let top hacker Justin Gardner (Rhynorater) explain👇
4
2
1
62
8,707
The Hive Exchange is coming to Nuremberg during it-sa Expo & Congress! Reserve your spot today luma.com/4hngxg09
2
10
5,728
The average organization sees a 50% increase in critical findings in the six months that follow a live hacking event. These events aren't just about the day-of results...they're the gift that keeps on giving 🎁 bugcrowd.com/blog/how-to-cho…

How to choose the right live hacking event for your organization | @Bugcrowd

"ot sure which live hacking event fits your program? Compare Virtual, Live in the Loop, Bug Bash, and ReCON to find the right format, scope, and budget.

bugcrowd.com
1
4
11
6,811
📡 BROADCASTING TO THE CROWD Vinted's bug bounty just went public on Bugcrowd! Now's your time: bugcrowd.com/engagements/vin…
1
12
7,729
How does a classic XXE attack work? 🤔 Here’s a simple explanation: 👇
1
5
63
8,427
Load more