-
How a Single Simple Bug Can Be Dangerous - Dutch Government VRP
Feb 29, 2020
A couple weeks ago, after finding out that the Dutch Government has a vulnerability disclosure program— and that they give out tshirts for valid findings— I decided to give it a shot over the weekend! In this post I'll talk about parts of my recon process for this program, and then how even a seemingly small bug can become potentially dangerous given the circumstance. I have been given permission to write about this, however I will be removing any references towards the name of the organization.…more
-
My First Attempt at a Bug-Bounty Recon Process
Sep 21, 2019
A version of the map that I'll try to keep relatively updated is here - last updated December 7th 2019So… Since I'm starting to get into bug-bounty, I figured that I should probably come up with some sort of consistent process for recon that I can fall back on, if what I'm doing isn't panning out. scripted events are marked by the scroll while the manual events are marked by the fist…more