| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <df73ebc0392e4f1e52e252b5aaa73a11@redtimmy.com> Date: Thu, 04 Feb 2021 12:59:17 +0100 From: Red Timmy Security <publications@...timmy.com> To: fulldisclosure@...lists.org Subject: [FD] Bug bounty failure stories to learn from: how we ended up to hack a bank with no reward Hi, bug bounty programs are spreading more and more nowadays.We would like to share our experience in this area but from a different angle this time: failure stories rather than success stories. We provide some hints and talk about side effects (for example how one can end up hacking a bank as happened to us), as well as the reasoning behind the choices about targets and approaches followed during the bounty campaign. Full stories here -> https://www.redtimmy.com/bug-bounty-failure-stories-to-learn-from-how-we-ended-up-to-hack-a-bank-with-no-reward/ regards Red Timmy Security _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists