Thread by @intigriti

It is Wednesday my dudes, so that means it's time for #BugBytes 182! Your weekly round up of all things Bug Bounty

Let's get into it 🧵 1/11

1⃣ Trade deal: We provide you our top resources from this weeks bug bytes, you reply to our survey telling us what you think of Bug Bytes 2/11 forms.office.com/r/ReW4bs0FXk

2⃣ How do you do fellow kids, did you know we have a Mastodon account? We're on infosec exchange, here's the link to follow us 3/11 infosec.exchange/@Intigriti

3⃣ I can haz unlock code? @xdavidhu shares an accidental finding after forgetting his SIM PIN which netted them $70k! 4/11 bugs.xdavidhu.me/google/2022/11…

4⃣ such tool, much discovery, wow @pdiscoveryio launches katana a new tool which offers some great crawling and spidering to add to your toolbox 5/11
github.com/projectdiscove…

5⃣ Hello There, @gregxsunday shares some tips for increasing the impact of findings for bigger bounties 6/11

6⃣ @samwcyo and the boys formed a small group of hackers and in 10 days they found 100 bugs, with 50 critical findings! 7/11

https://twitter.com/samwcyo/status/1589858684427210752

7⃣ @EdwardLichtner was a hacker until he took an JWT to the knee, check out his 2-part blog on hacking JWTs 8/11 zerodayhacker.com/hacking-a-jwt-…

8⃣ stonks @PortSwigger is running a Burp Challenge, solve 4 challenges by the 31st of December to win swag and a Burp Suite Certified Practitioner exam credit 9/11
portswigger.net/web-security/c…

9⃣ @niksthehacker presents an interesting bug chain using path traversal and SSRF to find an internal git repository, true story 10/11
blog.niksthehacker.com/chaining-path-…

If you want to read the whole absolute unit of an issue, check out the full blog post 🫵👇 11/11 blog.intigriti.com/2022/11/16/bug…