Alameen KarimMerali Feb 23
If y'all are aware I recently completed the CompTIA, Inc. #Network+ Exam and obtained the #CompTIA #CIOS (#Information #Technology #Operations #Specialist). This was all after finishing some #Bug #Bounty #Hunting on #YesWeHack YesWeHack for GovTech (Government Technology Agency of Singapore) and earned two badges that I posted to my #LinkedIn around last year. At the moment, I recently finished my Hackviser #CAPT (#Certified #Associate #Penetration #Tester). Wish me success on the #Hackviser #CWSE (#Certified #Web #Security #Expert) as well, and I hope all goes well with this one too. Not to forget, I'm also still continuing #University with University of the People as well and continuing my #Security+ as well, as I continue working at the same time. Planning to go on some bug hunts sometime soon as well.
Michael GarwegOct 31, 2025
"Basic Insecure direct object references (IDOR) in cookie"? #Pwned! It was a blast on #YesWeHack!
Think you can take it on? 🌟
https://dojo-yeswehack.com/challenge/play/53edede7-bf27-478e-8976-e203f778fb4e?pwned
#ChallengeAccepted
Basic Insecure direct object references (IDOR) in cookie - YesWeHack Dojo

# Basic Insecure direct object references (IDOR) in cookie Send JSON data to the application and exploit the poor role verification process to get the flag.

ZATAZ - "\o/"Sep 30, 2025

// YesWeHack rejoint les autorités CVE

👏 La startup française YesWeHack devient autorité CNA et peut désormais attribuer des identifiants CVE. Une belle reconnaissance pour l'écosystème français du bug bounty.

🔗 https://www.datasecuritybreach.fr/yeswehack-rejoint-les-autorites-cve/

#YesWeHack #CVE #BugBounty #CyberSécurité #zataz

Teddy / Domingo (🇨🇵/🇬🇧)Sep 23, 2025
Le Français YesWeHack, dénicheur de vulnérabilités informatiques, entre dans la cour des grands ! #YesWeHack a officiellement obtenu le statut d'autorité de numérotation CVE. Une excellente nouvelle pour la plateforme française de #bug bounty, qui peut désormais attribuer des identifiants de #vulnérabilités de #sécurité.
https://www.clubic.com/actualite-580342-le-francais-yeswehack-denicheur-de-vulnerabilites-informatiques-entre-dans-la-cour-des-grands.html
Le Français YesWeHack, dénicheur de vulnérabilités informatiques, entre dans la cour des grands !

YesWeHack a officiellement obtenu le statut d'autorité de numérotation CVE. Une excellente nouvelle pour la plateforme française de bug bounty, qui peut désormais attribuer des identifiants de vulnérabilités de sécurité.

clubic.com
Max LeeJul 25, 2025

Gotta love how the bug bounty site YesWeHack keeps rejecting my KYC as they want a full photo of my ID even though I have the right to redact certain information... (they seem to even have an automatic black bar detector lol)

Kinda annoying when all you want to do is report a security issue through the proper channels -.-

#cybersecurity #yeswehack

leHACKJun 28, 2025
🇬🇧🐞 The live Bug Bounty by YesWeHack kicks off in 5 minutes!
🗓️ June 28 | ⏰ 10:00 → 03:00 (29th)
📌 Loft Area
🧠 Program revealed at the last minute — open to all leHACK attendees registered on https://yeswehack.com
#leHACK #BugBounty #YesWeHack
Show threadleHACKJun 28, 2025
🇫🇷🐞 Le Bug Bounty live de @yeswehack démarre dans 5 minutes !
🗓️ 28 juin | ⏰ 10h → 3h (29)
📌 Loft Area
🧠 Programme révélé à la dernière minute — accessible à tous les inscrit·es sur yeswehack.com présents à leHACK
#leHACK #BugBounty #YesWeHack
leHACKJun 25, 2025

🇬🇧✨ Real-time hacking. Real bounties. Real community.
YesWeHack is hosting a Live Bug Bounty at leHACK 2025!
🗓️ June 28, 10:00 → June 29, 03:00
📍Le Loft, Cité des Sciences – Paris

Whether you're new to bug bounty or a seasoned hunter, this is your chance to dive into a live, in-scope target, collaborate with peers, and claim rewards.

🎯 Targets revealed live
🛠️ Open to all leHACK attendees

🕹️ Details: https://www.yeswehack.com/page/yeswehack-at-lehack-2025

#leHACK #BugBounty #YesWeHack

Show threadleHACKJun 25, 2025

🇫🇷✨ Du hacking en temps réel. Des failles réelles. Des récompenses concrètes.
YesWeHack organise son Live Bug Bounty pendant leHACK 2025 !
🗓️ 28 juin, 10h → 29 juin, 03h
📍Le Loft, Cité des Sciences – Paris

Débutant curieux ou hunter confirmé ? Rejoins une session unique : cibles dévoilées en live, bugs à dénicher, bounties à gagner.

🎯 Cibles exclusives
🛠️ Ouvert à tous les participants de leHACK

🕹️ Infos : https://www.yeswehack.com/page/yeswehack-at-lehack-2025

#leHACK #BugBounty #YesWeHack

YesWeHack at leHACK 2025: Ready for what's coming?

Find our team at booth 41 and join our exclusive Live Bug Bounty on June 28-29, in Le Loft!

Wen Bin May 12, 2025

❓ How can bug bounty programs …
1️⃣ Keep hackers engaged in the long term?
2️⃣ Effectively increase the amount of good quality reports that you receive?
3️⃣ Stand out from competition and be the program that hackers choose to hack on?

📽️ In this video, I covered 5 tips that can allow any bug bounty programs to stand out from the rest. If you implement them, you can expect an increased participation from skilled and good hackers (or security researchers) and a consistent stream of valuable vulnerability submissions! Most importantly, are you ready to handle the resulting high quality reports? 😊

🫵 Hackers, if these tips hit the mark, please share them with your favourite bug bounty programs! Your input could lead to improvements like loyalty programs and direct report submissions (skip platform analysts or triage teams). Let's level up the bug bounty landscape together! 😎

⬇️⬇️⬇️

https://youtu.be/msr-7ZtmLdE

#bugbounty #bugbountytips #togetherwehitharder #hackerone #ittakesacrowd #outhackthemall #bugcrowd #bugcrowdtipjar #hackwithintigriti #intigriti #yeswehack #yeswerhackers #ethicalhacking #whitehat

5 Tips for Boosting Long-Term Engagement in your Bug Bounty Program

YouTube