Media Summary: Some easy vulnerabilities this week, a directory traversal due to a bad regex, a simply yet somewhat mysterious authentication ... In this session, I will discuss the trend of AI security reports seen in A short talk about how I got started doing

Gitlab Bug Bounty Running Ci - Detailed Analysis & Overview

Some easy vulnerabilities this week, a directory traversal due to a bad regex, a simply yet somewhat mysterious authentication ... In this session, I will discuss the trend of AI security reports seen in A short talk about how I got started doing This week we look at a insecure deserialization ( by William Bowling () Bounty: $10000 More details: https:// Arbitrary file read via the UploadsRewriter when moving and

Learn more about how Riccardo Padovani ( on

Photo Gallery

GitLab Bug Bounty: Running CI Pipelines as Any User $12,000 Bounty
133 - Spring4Shell, PEAR Bugs, and GitLab's Hardcoded Passwords [Bug Bounty Podcast]
Ron Chan's Secret to Finding Critical Security Issues on GitLab
Improper Access Control in Gitlab | Got Bounty of $ 3,000 😱#bugbounty #bugbountytips #cybersecurity
131 - GitLab Arbitrary File Read and Bypassing PHP's filter_var [Bug Bounty Podcast]
Katherine Wu - AI In Bug Bounty @ GitLab: The Good, The Bad, and The Extreme
Live GitLab Ask a Hacker with Bug Bounty Hunter (@vakzz) William Bowling (Public)
h@cktivitycon 2020: The journey of finding and exploiting a bug in GitLab
159 - GitHub to GitLab RCE and a new PHP Supply Chain Attack [Bug Bounty Podcast]
$10,000 SSRF on project import | Gitlab | Bug Bounty 2020
$20,000 Arbitrary file read via the UploadsRewriter | GitLab | Bug Bounty 2020
Bug Bounty Hunter Riccardo Padovani discusses his approach to hunting bugs on GitLab
View Detailed Profile
GitLab Bug Bounty: Running CI Pipelines as Any User $12,000 Bounty

GitLab Bug Bounty: Running CI Pipelines as Any User $12,000 Bounty

This video demonstrates a real

133 - Spring4Shell, PEAR Bugs, and GitLab's Hardcoded Passwords [Bug Bounty Podcast]

133 - Spring4Shell, PEAR Bugs, and GitLab's Hardcoded Passwords [Bug Bounty Podcast]

This week we have some fun with some

Ron Chan's Secret to Finding Critical Security Issues on GitLab

Ron Chan's Secret to Finding Critical Security Issues on GitLab

... finding critical flaws on

Improper Access Control in Gitlab | Got Bounty of $ 3,000 😱#bugbounty #bugbountytips #cybersecurity

Improper Access Control in Gitlab | Got Bounty of $ 3,000 😱#bugbounty #bugbountytips #cybersecurity

Hackerone

131 - GitLab Arbitrary File Read and Bypassing PHP's filter_var [Bug Bounty Podcast]

131 - GitLab Arbitrary File Read and Bypassing PHP's filter_var [Bug Bounty Podcast]

Some easy vulnerabilities this week, a directory traversal due to a bad regex, a simply yet somewhat mysterious authentication ...

Katherine Wu - AI In Bug Bounty @ GitLab: The Good, The Bad, and The Extreme

Katherine Wu - AI In Bug Bounty @ GitLab: The Good, The Bad, and The Extreme

In this session, I will discuss the trend of AI security reports seen in

Live GitLab Ask a Hacker with Bug Bounty Hunter (@vakzz) William Bowling (Public)

Live GitLab Ask a Hacker with Bug Bounty Hunter (@vakzz) William Bowling (Public)

William, aka @vakzz is a top 10 hacker in our

h@cktivitycon 2020: The journey of finding and exploiting a bug in GitLab

h@cktivitycon 2020: The journey of finding and exploiting a bug in GitLab

A short talk about how I got started doing

159 - GitHub to GitLab RCE and a new PHP Supply Chain Attack [Bug Bounty Podcast]

159 - GitHub to GitLab RCE and a new PHP Supply Chain Attack [Bug Bounty Podcast]

This week we look at a insecure deserialization (

$10,000 SSRF on project import | Gitlab | Bug Bounty 2020

$10,000 SSRF on project import | Gitlab | Bug Bounty 2020

by William Bowling (@wcbowling) Bounty: $10000 More details: https://

$20,000 Arbitrary file read via the UploadsRewriter | GitLab | Bug Bounty 2020

$20,000 Arbitrary file read via the UploadsRewriter | GitLab | Bug Bounty 2020

Arbitrary file read via the UploadsRewriter when moving and

Bug Bounty Hunter Riccardo Padovani discusses his approach to hunting bugs on GitLab

Bug Bounty Hunter Riccardo Padovani discusses his approach to hunting bugs on GitLab

Learn more about how Riccardo Padovani (@rpadovani on

Bug Bounty | IDOR | Gitlab

Bug Bounty | IDOR | Gitlab

Bug Bounty | IDOR | Gitlab