YesWeHack ⠵

@yeswehack

Offensive Security & Exposure Management Platform 🎯 yeswehack.com/programs 👾 dojo-yeswehack.com 💡 yeswehack.com/blog

World

yeswehack.com

Replies Reposts Media Articles

Pinned
YesWeHack ⠵
@yeswehack
Sep 3
GPT-5.6 Sol went bug hunting blind. We set the destination and let Codex find the route 🧭 Within 1m 14s, it found a JWT flaw, forged an admin session and proved access 🔍 But turning that into a valid report is still on us 👀 Our guide to Codex for Bug Bounty 👇
Codex for Bug Bounty: explore broadly, validate rigorously
From yeswehack.com
5
YesWeHack ⠵
@yeswehack
Sep 3
Our Bug Bounty Bulletin – featuring a research roundup, new hacking opportunities, technical advice & hunter Q&As – is now available on X! Inside: high-calibre research from @albinowax @t0xodile @garethheyes @olivier_boschko @citizenlab & more 👇
Article
Bug Bounty Bulletin #21 – and the first on X!
Insights, inspiration and hunting opportunities for ethical hackers Welcome to YesWeHack’s Bug Bounty Bulletin – featuring new hunting opportunities 🐞 CTF challenges 🏁 a research roundup 🔬 plus...
1
YesWeHack ⠵
@yeswehack
Aug 31
An SSRF protected by a hostname whitelist... what could go wrong? 👀 In the first episode of our #TalkiePwnii @WebSecAcademy mini-series, @pwnwithlove breaks down the parsing tricks behind the bypass. Full walkthrough 👇
SSRF with Whitelist-Based Input Filter – PortSwigger Web Security Academy #1 | Talkie Pwnii
From youtube.com
2
YesWeHack ⠵
@yeswehack
Aug 28
The YesWeHack Claude Kit is out, and ready to help you write clear, well-evidenced Bug Bounty reports with Claude Code ✨ Big thanks to @Rhynorater for featuring our new plugin in the latest episode of @ctbbpodcast! Check it out 👇
2
YesWeHack ⠵
@yeswehack
Aug 28
Ever been a retro gamer? 🎮 This month’s CTF drops you straight into an old-school game, but there’s only one way to win: hack it. Can you break the rules, beat the high score and capture the flag? 🚩 Go hack it 👉 dojo-yeswehack.com/challenge-of-t…