Security Testing

Full Account Takeover of ANY user via Insecure Direct Object Reference (IDOR) on reset password functionality

by Samuele Gugliottain bug-bounty,security-testing,ethical-hacking,writeup

BitNinja bug bounty program launched on our platform a few days ago, so far more than 100 ethical hackers have joined. Why the ethical hackers like this program? What are the most important factors in building up your bug bounty program?

by Balazs Poznerin bug-bounty,security-testing,ethical-hacking,hackrate

How can I measure the security level of our IT systems? Should I change our pentester company every year? Where should I store the results of pentest reports? Are these questions familiar to you? If so, keep reading.

by Balazs Poznerin bug-bounty,ciso,security-testing,ethical-hacking